http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2011-11-17 01:15:11 - Recent changes en : New page Details of O2 presentation usually delivered at OWASP Chapters and other events '''OWASP O2 Platform'''' - Dinis Cruz The O2 Platform is focused on automating application security knowledge and workflows It is specifically designed for developers and security consultants to be able to perform quick, effective and thorough source code-driven application security reviews blackbox whitebox In addition to the manual findings created discovered by security consultants, the OWASP O2 Platform allows the easy consumption of results from multiple OWASP projects and commercial scanning tools This allows security consultants to find, exploit and automate via Unit Tests security vulnerabilities usually dismissed by the community as impossible to find recreate More importantly, it provides security consultants a mechanism to a talk with developers via UnitTest , b give developers a way to replicate check if it's fixed the vulnerabilities reported and c engage in a two-way conversion on the best way to fix remediate those vulnerabilities For more details see https wwwowasporg indexphp OWASP_O2_Platform, to download binary or source goto http codegooglecom p o2platform downloads list '''Dinis Bio''' Dinis Cruz is a Security Consultant based in London UK and specialized in ASPNET J2EE Application Security, Application Security audits and NET Security Curriculum Development For the past couple years Dinis has focused on the field of Static Source Code Analysis and Dynamic Website Assessments aka penetration testing , and is the main developer of the OWASP O2 Platform which is an Open Source project that is focused on 'Automating Security Consultants Knowledge Workflows' and 'Allowing non-security experts to access and consume Security Knowledge' Dinis is currently focused on making the O2 Platform the industry standard for consuming, instrumenting and data-sharing between the multiple WebAppSec tools, the Security consultants and the final users from management to developers https wwwowasporg indexphp User Diniscruz http://www.secuobs.com/revue/news/341110.shtmlhttp://www.secuobs.com/revue/news/341110.shtml Secuobs.com : 2011-11-02 13:52:32 - Recent changes en - created new account User Fabricio New page http://www.secuobs.com/revue/news/338327.shtmlhttp://www.secuobs.com/revue/news/338327.shtml Secuobs.com : 2011-07-21 09:39:40 - Recent changes en - New page The links below go to O2's Blog which is hosted at http o2platformwordpresscom ''' NET''' http o2platformwordpresscom 2011 07 18 selecting-a-tabcontrol-page-in-a-thread-safe-way Selecting a TabControl page in a Thread safe way http o2platformwordpresscom 2011 07 16 humm-net-random-class-is-not-thread-safe Humm NET Random class is not Thread Safe http o2platformwordpresscom 2011 07 07 injecting-o2-into-another-net-process-in-this-case-nunit-exe Injecting O2 into another NET Process in this case NUnitexe http o2platformwordpresscom 2011 06 30 adding-an-o2-menu-to-notepad-and-listen-to-menu-selections Adding an O2 Menu to Notepad and 'listen' to menu selections http o2platformwordpresscom 2011 06 30 creating-a-custom-version-of-o2-quick-development-gui-environment-stand-alone-and-in-aspx Creating a custom version of 'O2 Quick Development Gui' environment stand-alone and in aspx http o2platformwordpresscom 2011 06 27 changing-a-referencedll-value-of-a-vs-csproj-file Changing a reference dll value of a VS CSproj file http o2platformwordpresscom 2011 06 25 removing-c-class-from-c-file-in-multiple-wsdl-files Removing C class from C file in multiple WSDL files http o2platformwordpresscom 2011 06 16 o2-trick-to-complile-with-explict-references O2 Trick to complile with explict references http o2platformwordpresscom 2011 04 10 scripting-o2-tool-ast-search-to-find-null-references-net-static-analysis Scripting O2 Tool - AST Search to find Null references NET Static Analysis http o2platformwordpresscom 2011 04 10 o2-tool-ast-search-net-static-analysis O2 Tool - AST Search NET Static Analysis http o2platformwordpresscom 2011 04 03 o2-script-consume-webservices-by-using-the-wsdls-c O2 Script consume webservices by using the WSDL's C http o2platformwordpresscom 2011 04 03 o2-script-using-reflection-to-invoke-bing-search-web-service O2 Script Using Reflection to Invoke Bing Search Web Service http o2platformwordpresscom 2011 04 02 o2-script-dynamic-creation-of-net-assemblies-types-methods-properties-and-fields O2 Script Dynamic creation of Net Assemblies, Types, Methods, Properties and Fields http o2platformwordpresscom 2011 03 25 making-httprequest-querystring-and-form-editable Making HttpRequest QueryString and Form Editable http o2platformwordpresscom 2011 03 24 decomposing-an-lamba-method-used-in-an-o2-script Decomposing an Lamba method used in an O2 Script http o2platformwordpresscom 2011 03 09 custom-o2-for-dotnet-static-analysis Custom O2 for NET Static Analysis http o2platformwordpresscom 2011 02 20 o2-script-create-xsd-and-assembly-from-xml-file O2 Script Create XSD and Assembly from XML file http o2platformwordpresscom 2010 11 03 using-reflection-to-try-to-set-net-default-proxy-settings Using Reflection to try to set NET default proxy settings http o2platformwordpresscom 2010 10 20 dealing-with-the-server-committed-a-protocol-violation-sectionresponsestatusline Dealing with The server committed a protocol violation Section ResponseStatusLine ''' EC2''' http o2platformwordpresscom 2011 07 18 o2-platform-amazon-ec2-image-ami O2 Platform Amazon EC2 Image AMI http o2platformwordpresscom 2011 07 16 using-amazon-s3-browser-script-to-upload-files-to-amazon-s3 Using 'Amazon S3 Browser' script to upload files to Amazon S3 http o2platformwordpresscom 2011 04 17 new-amazon-ec2-image-filtering-focused-extension-methods New Amazon EC2 'image filtering focused' Extension Methods http o2platformwordpresscom 2011 04 16 script-to-view-amazon-ec2-images-list Script to view Amazon EC2 Images List http o2platformwordpresscom 2011 04 16 using-the-o2s-amazon-ec2-api Using the O2's Amazon EC2 API http o2platformwordpresscom 2011 04 16 new-amazon-ec2-net-api New Amazon EC2 Net API http o2platformwordpresscom 2011 04 16 solved-the-problem-with-decryping-amazonec2-instances-password Solved the problem with decryping AmazonEC2 Instance's password http o2platformwordpresscom 2011 04 16 trying-to-decrypt-amazon-ec2-password-using-bouncycastle-and-it-is-not-working Trying to Decrypt Amazon EC2 password using BouncyCastle and it is not working http o2platformwordpresscom 2011 04 10 amazon-ec2-browser-timer-to-stop-instances Amazon EC2 Browser - Timer to Stop Instances http o2platformwordpresscom 2011 04 08 o2-tool-amazon-ec2-browser O2 Tool - Amazon EC2 Browser ''' Fortify''' http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-simple-viewer-based-on-propertygrid Fortify FVDL Files - Simple Viewer based on PropertyGrid http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-looking-at-the-api_fortify-classes-that-parse-the-fvdl-data Fortify FVDL Files - Looking at the API_Fortify classes that parse the fvdl data http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-first-working-parser-and-viewer-for-fvdl-files Fortify FVDL Files - First working Parser and Viewer for fvdl files http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-creating-net-classes-that-map-to-fvdl-xml-structure Fortify FVDL files - Creating NET classes that map to Fvdl xml structure http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-pourcentse2pourcents80pourcents93-creating-an-api-and-consumining-it Fortify FVDL files - Creating an API and consumining it http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-simple-tablelist-viewer-tool Fortify FVDL files - Simple TableList Viewer Tool http o2platformwordpresscom 2011 07 16 fortify-fvdl-files-creating-and-consuming-the-schema-and-csharp-file Fortify FVDL files - Creating and consuming the schema and CSharp file ''' IE Automation''' http o2platformwordpresscom 2011 07 20 login-into-starbucks-via-btopenzone-using-browser-automation-watin Login into Starbucks via BTOpenZone using Browser Automation Watin http o2platformwordpresscom 2011 07 15 visualizing-the-links-in-jpetstore-spring-mvc Visualizing the links in JPetStore Spring MVC http o2platformwordpresscom 2011 07 13 writing-an-o2-ie-automation-script-for-jpetstore-account-creation Writing an O2 'IE Automation' Script for JPetStore Account Creation http o2platformwordpresscom 2011 07 13 injecting-firebuglite-and-jquery-into-a-ie-automation-page-jpetstore-example Injecting FirebugLite and jQuery into a IE Automation page JPetStore Example http o2platformwordpresscom 2011 07 12 using-jquery-to-consume-an-asp-net-ashx-from-json-in-two-files Using jQuery to consume an ASPNET Ashx from JSON in two files http o2platformwordpresscom 2011 06 21 creating-a-jquery-datatable-using-serialized-json-object-2 Creating a jQuery DataTable using serialized JSON object http o2platformwordpresscom 2011 06 21 creating-a-jquery-jstree-using-serialized-json-object Creating a jQuery jsTree using serialized JSON object http o2platformwordpresscom 2011 06 08 invoking-jquery-from-o2 Invoking jQuery from O2 http o2platformwordpresscom 2011 06 06 trigger-an-keypress-event-in-ie Trigger an Keypress event in IE http o2platformwordpresscom 2011 04 16 script-to-fetch-and-present-large-number-of-wordpress-com-blog-entries Script to fetch and present large number of Wordpresscom blog entries http o2platformwordpresscom 2011 04 16 o2-script-to-automatically-upload-clipboard-images-to-wordpress-com O2 Script to automatically upload clipboard images to Wordpresscom http o2platformwordpresscom 2011 03 31 o2-script-util-javascript-object-viewer O2 Script Util - Javascript Object viewer http o2platformwordpresscom 2011 03 31 o2-script-manipulating-radiobuttons IE Automation Manipulating RadioButtons http o2platformwordpresscom 2011 03 08 running-javascript-in-ie-automation-environment Running Javascript in O2's IE Automation environment http o2platformwordpresscom 2011 03 07 o2-script-dwr-functions-viewer-and-invoker O2 Script DWR Functions Viewer and Invoker http o2platformwordpresscom 2011 03 04 o2-util-add-sites-to-ie-trusted-zone O2 Util Add sites to IE trusted zone http o2platformwordpresscom 2011 03 04 adding-sites-to-ie-trusted-zones O2 Method Adding sites to IE trusted zones http o2platformwordpresscom 2011 02 28 using-watin-as-a-browser-automation-engine Using WatiN as a browser automation engine http o2platformwordpresscom 2010 12 04 o2-script-to-perform-a-google-search O2 Script to perform a google search http o2platformwordpresscom 2010 12 03 solving-webgoat-sql-injection-lesson-3rd-one Solving WebGoat Sql Injection lesson 3rd one http o2platformwordpresscom 2010 12 02 o2-script-retrieving-crossdomain-xml-from-google O2 Script - Retrieving crossdomainxml from Google ''' Interoperability''' http o2platformwordpresscom 2011 07 20 submit-file-to-veracode-trial-using-browser-and-windows-automation-watin-and-white-apis Submit file to Veracode Trial using Browser and Windows Automation WatiN and White APIs http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-simple-viewer-based-on-propertygrid Fortify FVDL Files - Simple Viewer based on PropertyGrid http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-looking-at-the-api_fortify-classes-that-parse-the-fvdl-data Fortify FVDL Files - Looking at the API_Fortify classes that parse the fvdl data http o2platformwordpresscom 2011 07 18 fortify-fvdl-files-first-working-parser-and-viewer-for-fvdl-files Fortify FVDL Files - First working Parser and Viewer for fvdl files http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-creating-net-classes-that-map-to-fvdl-xml-structure Fortify FVDL files - Creating NET classes that map to Fvdl xml structure http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-pourcentse2pourcents80pourcents93-creating-an-api-and-consumining-it Fortify FVDL files - Creating an API and consumining it http o2platformwordpresscom 2011 07 17 fortify-fvdl-files-simple-tablelist-viewer-tool Fortify FVDL files - Simple TableList Viewer Tool http o2platformwordpresscom 2011 07 16 fortify-fvdl-files-creating-and-consuming-the-schema-and-csharp-file Fortify FVDL files - Creating and consuming the schema and CSharp file http o2platformwordpresscom 2011 07 16 using-amazon-s3-browser-script-to-upload-files-to-amazon-s3 Using 'Amazon S3 Browser' script to upload files to Amazon S3 http o2platformwordpresscom 2011 07 15 using-openpgp-to-easily-create-temp-pgp-keys-for-secure-file-exchange Using OpenPGP to Easily create temp PGP keys for secure file exchange http o2platformwordpresscom 2011 07 07 injecting-o2-into-another-net-process-in-this-case-nunit-exe Injecting O2 into another NET Process in this case NUnitexe http o2platformwordpresscom 2011 07 01 consuming-veracode-findings-files-using-o2 Consuming Veracode Findings File s using O2 http o2platformwordpresscom 2011 06 30 adding-an-o2-menu-to-notepad-and-listen-to-menu-selections Adding an O2 Menu to Notepad and 'listen' to menu selections http o2platformwordpresscom 2011 06 18 simple-windows-uiautomation-example Simple Windows UIAutomation example http o2platformwordpresscom 2011 03 24 o2-script-loading-data-from-an-xslx-openxml-file O2 Script loading data from an Xslx OpenXml file http o2platformwordpresscom 2011 03 18 o2-script-installing-tortoisesvn-and-processexplorer O2 Script Installing TortoiseSVN and ProcessExplorer http o2platformwordpresscom 2011 03 18 o2-script-creating-a-git-clone-using-tortoisegit O2 Script Creating a Git Clone using TortoiseGIT http o2platformwordpresscom 2011 03 18 o2-script-adding-the-ssh-to-github O2 Script adding the SSH Key to GitHub http o2platformwordpresscom 2011 03 16 o2-script-automating-puttygen-to-create-public-and-private-keys O2 Script automating PuttyGen to create Public and Private Keys http o2platformwordpresscom 2011 03 15 o2-script-automating-tortoisegit-installation O2 Script Automating TortoiseGit installation http o2platformwordpresscom 2011 03 04 o2-util-wordpress-editor O2 Util Wordpress Editor http o2platformwordpresscom 2010 12 04 o2-script-creating-pdfs-with-owasp-appsec-brazil-certificates O2 Script - Creating PDFs with OWASP AppSec Brazil Certificates http o2platformwordpresscom 2010 11 02 ibm-appscan-source-7-0-scripting-viewing-ozasmt-file-contents IBM AppScan Source 70 Scripting Viewing ozasmt file Contents http o2platformwordpresscom 2010 10 19 accessing-youtube-via-its-c-api Accessing YouTube via its C API http o2platformwordpresscom 2010 10 18 o2-script-twitter-oauth-using-tweetsharp O2 Script Twitter OAuth using TweetSharp ''' Java''' http o2platformwordpresscom 2011 07 15 finding-the-jsp-views-that-are-mapped-to-controlers-in-jpetstore-spring-mvc Finding the JSP views that are mapped to controlers in JPetStore Spring MVC ''' JPetStore''' http o2platformwordpresscom 2011 07 20 submit-file-to-veracode-trial-using-browser-and-windows-automation-watin-and-white-apis Submit file to Veracode Trial using Browser and Windows Automation WatiN and White APIs http o2platformwordpresscom 2011 07 19 visualizing-spring-mvc-annotations-based-controls-and-autobinding-petclinics-vulnerabilities Visualizing Spring MVC Annotations based Controls and Autobinding PetClinic's vulnerabilities http o2platformwordpresscom 2011 07 18 util-java-jsp-and-xml-file-search-example-using-spring-mvc-jpetstore Util - Java, Jsp and Xml File Search Example using Spring MVC JPetStore http o2platformwordpresscom 2011 07 18 simple-viewer-to-see-jsp-files-example-using-spring-mvc-spetstore Simple Viewer to see JSP files example using Spring MVC SPetStore http o2platformwordpresscom 2011 07 18 packaged-spring-mvc-security-test-apps-jpetstore-and-petclinc Packaged Spring MVC Security Test Apps JPetStore and PetClinc http o2platformwordpresscom 2011 07 15 visualizing-the-links-in-jpetstore-spring-mvc Visualizing the links in JPetStore Spring MVC http o2platformwordpresscom 2011 07 15 finding-the-jsp-views-that-are-mapped-to-controlers-in-jpetstore-spring-mvc Finding the JSP views that are mapped to controlers in JPetStore Spring MVC http o2platformwordpresscom 2011 07 13 viewing-jpetstore-hsqldb-database-and-couple-more-autobinding-issues Viewing JPetStore Hsqldb database and couple more Autobinding issues http o2platformwordpresscom 2011 07 13 writing-an-o2-ie-automation-script-for-jpetstore-account-creation Writing an O2 'IE Automation' Script for JPetStore Account Creation http o2platformwordpresscom 2011 07 13 injecting-firebuglite-and-jquery-into-a-ie-automation-page-jpetstore-example Injecting FirebugLite and jQuery into a IE Automation page JPetStore Example http o2platformwordpresscom 2011 07 13 creating-an-api-for-jpetstore-browser-auto Creating an API for JPetStore Browser automation http o2platformwordpresscom 2011 07 12 o2-script-spring-mvc-util-view-controllers O2 Script 'Spring MVC Util - View Controllers' http o2platformwordpresscom 2011 07 12 o2-script-for-spring-mvc-jpetstore-start-servers-startstop-apache-and-hsqldb O2 Script for Spring MVC JPetStore - Start Servers start stop apache and hsqldb http o2platformwordpresscom 2011 07 11 o2-script-with-blackbox-exploits-for-spring-mvc-autobinding-vulnerabilities-in-jpetstore O2 Script with BlackBox exploits for Spring MVC AutoBinding vulnerabilities in JPetStore ''' jQuery''' http o2platformwordpresscom 2011 07 13 injecting-firebuglite-and-jquery-into-a-ie-automation-page-jpetstore-example Injecting FirebugLite and jQuery into a IE Automation page JPetStore Example http o2platformwordpresscom 2011 07 12 using-jquery-to-consume-an-asp-net-ashx-from-json-in-two-files Using jQuery to consume an ASPNET Ashx from JSON in two files http o2platformwordpresscom 2011 06 21 creating-a-jquery-datatable-using-serialized-json-object-2 Creating a jQuery DataTable using serialized JSON object http o2platformwordpresscom 2011 06 21 creating-a-jquery-jstree-using-serialized-json-object Creating a jQuery jsTree using serialized JSON object http o2platformwordpresscom 2011 06 08 invoking-jquery-from-o2 Invoking jQuery from O2 http o2platformwordpresscom 2011 06 06 trigger-an-keypress-event-in-ie Trigger an Keypress event in IE ''' Misc Topics''' http o2platformwordpresscom 2011 04 04 o2script-not-optimized-fuzz-string-generator O2Script Not Optimized fuzz string generator http o2platformwordpresscom 2010 04 30 hello-world Source code test ''' Moq''' http o2platformwordpresscom 2011 04 10 unit-test-for-httpmodule-using-moq-to-wrap-httprequest Unit Test for HttpModule using Moq to wrap HttpRequest http o2platformwordpresscom 2011 04 05 mocking-httpcontext-httprequest-and-httpresponse-for-unittests-using-moq Mocking HttpContext HttpRequest and HttpResponse for UnitTests using Moq ''' O2 Internals''' http o2platformwordpresscom 2011 07 13 o2-script-to-download-o2-reference-dlls-from-svn O2 Script to download O2 Reference DLLs from SVN http o2platformwordpresscom 2011 06 16 o2-trick-to-complile-with-explict-references O2 Trick to complile with explict references http o2platformwordpresscom 2011 03 24 decomposing-an-lamba-method-used-in-an-o2-script Decomposing an Lamba method used in an O2 Script http o2platformwordpresscom 2011 03 06 o2-script-downloading-file O2 Script Downloading File http o2platformwordpresscom 2011 02 20 creating-an-api-to-be-consumed-by-an-o2-script Creating an API to be consumed by an O2 Script http o2platformwordpresscom 2011 02 20 consuming-extension-method-from-external-file Consuming extension method from external file http o2platformwordpresscom 2010 11 02 example-of-custom-o2-focused-on-a-security-consultants-need Example of Custom O2 focused on a security consultant's need http o2platformwordpresscom 2010 11 02 creating-custom-o2-versions Creating custom O2 Versions http o2platformwordpresscom 2010 10 18 creating-a-simple-ribbon-bar Creating a Simple Ribbon Bar http o2platformwordpresscom 2010 10 07 7th-oct-clickonce-publish 7th Oct - ClickOnce Publish http o2platformwordpresscom 2010 10 07 new-blog-engine-for-o2-development-related-posts New blog engine for O2 Development related posts ''' Spring MVC''' http o2platformwordpresscom 2011 07 19 visualizing-spring-mvc-annotations-based-controls-and-autobinding-petclinics-vulnerabilities Visualizing Spring MVC Annotations based Controls and Autobinding PetClinic's vulnerabilities http o2platformwordpresscom 2011 07 18 util-java-jsp-and-xml-file-search-example-using-spring-mvc-jpetstore Util - Java, Jsp and Xml File Search Example using Spring MVC JPetStore http o2platformwordpresscom 2011 07 18 simple-viewer-to-see-jsp-files-example-using-spring-mvc-spetstore Simple Viewer to see JSP files example using Spring MVC SPetStore http o2platformwordpresscom 2011 07 18 packaged-spring-mvc-security-test-apps-jpetstore-and-petclinc Packaged Spring MVC Security Test Apps JPetStore and PetClinc http o2platformwordpresscom 2011 07 15 visualizing-the-links-in-jpetstore-spring-mvc Visualizing the links in JPetStore Spring MVC http o2platformwordpresscom 2011 07 15 finding-the-jsp-views-that-are-mapped-to-controlers-in-jpetstore-spring-mvc Finding the JSP views that are mapped to controlers in JPetStore Spring MVC http o2platformwordpresscom 2011 07 13 viewing-jpetstore-hsqldb-database-and-couple-more-autobinding-issues Viewing JPetStore Hsqldb database and couple more Autobinding issues http o2platformwordpresscom 2011 07 13 writing-an-o2-ie-automation-script-for-jpetstore-account-creation Writing an O2 'IE Automation' Script for JPetStore Account Creation http o2platformwordpresscom 2011 07 13 injecting-firebuglite-and-jquery-into-a-ie-automation-page-jpetstore-example Injecting FirebugLite and jQuery into a IE Automation page JPetStore Example http o2platformwordpresscom 2011 07 13 creating-an-api-for-jpetstore-browser-auto Creating an API for JPetStore Browser automation http o2platformwordpresscom 2011 07 12 o2-script-spring-mvc-util-view-controllers O2 Script 'Spring MVC Util - View Controllers' http o2platformwordpresscom 2011 07 12 o2-script-for-spring-mvc-jpetstore-start-servers-startstop-apache-and-hsqldb O2 Script for Spring MVC JPetStore - Start Servers start stop apache and hsqldb http o2platformwordpresscom 2011 07 11 o2-script-with-blackbox-exploits-for-spring-mvc-autobinding-vulnerabilities-in-jpetstore O2 Script with BlackBox exploits for Spring MVC AutoBinding vulnerabilities in JPetStore ''' Veracode''' http o2platformwordpresscom 2011 07 20 submit-file-to-veracode-trial-using-browser-and-windows-automation-watin-and-white-apis Submit file to Veracode Trial using Browser and Windows Automation WatiN and White APIs http o2platformwordpresscom 2011 07 01 consuming-veracode-findings-files-using-o2 Consuming Veracode Findings File s using O2 ''' videos''' http o2platformwordpresscom 2011 07 21 webgoat-first-example-of-o2-webgoat-api WebGoat - First Example of O2 WebGoat API http o2platformwordpresscom 2011 07 13 writing-an-o2-ie-automation-script-for-jpetstore-account-creation Writing an O2 'IE Automation' Script for JPetStore Account Creation http o2platformwordpresscom 2011 07 12 o2-script-spring-mvc-util-view-controllers O2 Script 'Spring MVC Util - View Controllers' http o2platformwordpresscom 2011 07 12 o2-script-for-spring-mvc-jpetstore-start-servers-startstop-apache-and-hsqldb O2 Script for Spring MVC JPetStore - Start Servers start stop apache and hsqldb http o2platformwordpresscom 2011 07 11 o2-script-with-blackbox-exploits-for-spring-mvc-autobinding-vulnerabilities-in-jpetstore O2 Script with BlackBox exploits for Spring MVC AutoBinding vulnerabilities in JPetStore ''' WatiN''' http o2platformwordpresscom 2011 07 20 submit-file-to-veracode-trial-using-browser-and-windows-automation-watin-and-white-apis Submit file to Veracode Trial using Browser and Windows Automation WatiN and White APIs http o2platformwordpresscom 2011 07 20 login-into-starbucks-via-btopenzone-using-browser-automation-watin Login into Starbucks via BTOpenZone using Browser Automation Watin http o2platformwordpresscom 2011 07 16 using-amazon-s3-browser-script-to-upload-files-to-amazon-s3 Using 'Amazon S3 Browser' script to upload files to Amazon S3 http o2platformwordpresscom 2011 07 15 visualizing-the-links-in-jpetstore-spring-mvc Visualizing the links in JPetStore Spring MVC http o2platformwordpresscom 2011 07 13 o2-script-to-download-o2-reference-dlls-from-svn O2 Script to download O2 Reference DLLs from SVN http o2platformwordpresscom 2011 07 13 writing-an-o2-ie-automation-script-for-jpetstore-account-creation Writing an O2 'IE Automation' Script for JPetStore Account Creation http o2platformwordpresscom 2011 07 13 injecting-firebuglite-and-jquery-into-a-ie-automation-page-jpetstore-example Injecting FirebugLite and jQuery into a IE Automation page JPetStore Example http o2platformwordpresscom 2011 07 13 creating-an-api-for-jpetstore-browser-auto Creating an API for JPetStore Browser automation http o2platformwordpresscom 2011 07 12 o2-script-for-spring-mvc-jpetstore-start-servers-startstop-apache-and-hsqldb O2 Script for Spring MVC JPetStore - Start Servers start stop apache and hsqldb http o2platformwordpresscom 2011 07 11 o2-script-with-blackbox-exploits-for-spring-mvc-autobinding-vulnerabilities-in-jpetstore O2 Script with BlackBox exploits for Spring MVC AutoBinding vulnerabilities in JPetStore http o2platformwordpresscom 2011 06 21 creating-a-jquery-datatable-using-serialized-json-object-2 Creating a jQuery DataTable using serialized JSON object http o2platformwordpresscom 2011 06 21 creating-a-jquery-jstree-using-serialized-json-object Creating a jQuery jsTree using serialized JSON object http o2platformwordpresscom 2011 06 08 invoking-jquery-from-o2 Invoking jQuery from O2 http o2platformwordpresscom 2011 06 06 trigger-an-keypress-event-in-ie Trigger an Keypress event in IE http o2platformwordpresscom 2011 04 16 o2-script-to-automatically-upload-clipboard-images-to-wordpress-com O2 Script to automatically upload clipboard images to Wordpresscom http o2platformwordpresscom 2011 04 08 o2-tool-amazon-ec2-browser O2 Tool - Amazon EC2 Browser http o2platformwordpresscom 2011 03 31 o2-script-manipulating-radiobuttons IE Automation Manipulating RadioButtons http o2platformwordpresscom 2011 03 08 o2-script-testing-for-rdp-server O2 Script Testing for RDP server http o2platformwordpresscom 2011 03 08 running-javascript-in-ie-automation-environment Running Javascript in O2's IE Automation environment http o2platformwordpresscom 2011 03 04 o2-util-wordpress-editor O2 Util Wordpress Editor http o2platformwordpresscom 2011 03 04 adding-sites-to-ie-trusted-zones O2 Method Adding sites to IE trusted zones http o2platformwordpresscom 2011 02 28 using-watin-as-a-browser-automation-engine Using WatiN as a browser automation engine http o2platformwordpresscom 2010 12 04 o2-script-to-perform-a-google-search O2 Script to perform a google search http o2platformwordpresscom 2010 12 03 solving-webgoat-sql-injection-lesson-3rd-one Solving WebGoat Sql Injection lesson 3rd one http o2platformwordpresscom 2010 12 02 o2-script-retrieving-crossdomain-xml-from-google O2 Script - Retrieving crossdomainxml from Google http o2platformwordpresscom 2010 10 18 o2-script-twitter-oauth-using-tweetsharp O2 Script Twitter OAuth using TweetSharp ''' WebGoat''' http o2platformwordpresscom 2011 07 21 webgoat-first-example-of-o2-webgoat-api WebGoat - First Example of O2 WebGoat API ''' Windows Tools''' http o2platformwordpresscom 2011 07 15 using-openpgp-to-easily-create-temp-pgp-keys-for-secure-file-exchange Using OpenPGP to Easily create temp PGP keys for secure file exchange http o2platformwordpresscom 2011 03 26 o2-script-quick-file-viewer O2 Script Quick File Viewer http o2platformwordpresscom 2011 03 08 o2-script-testing-for-rdp-server O2 Script Testing for RDP server http o2platformwordpresscom 2011 03 04 o2-script-sequence-creating-a-windows-registry-viewer O2 Script Sequence Creating a Windows Registry Viewer http o2platformwordpresscom 2010 11 02 util-font-viewer-h2 Util - Font Viewerh2 ''' WS''' http o2platformwordpresscom 2011 04 03 o2-script-consume-webservices-by-using-the-wsdls-c O2 Script consume webservices by using the WSDL's C http o2platformwordpresscom 2011 04 03 o2-script-using-reflection-to-invoke-bing-search-web-service O2 Script Using Reflection to Invoke Bing Search Web Service http o2platformwordpresscom 2010 11 26 using-a-webservice-to-get-the-ip-address Using a webservice to get the IP Address http://www.secuobs.com/revue/news/318385.shtmlhttp://www.secuobs.com/revue/news/318385.shtml Secuobs.com : 2011-07-21 08:02:59 - Recent changes en - uploaded File 7 21 2011 1 00 59 PM tmp9003jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/318375.shtmlhttp://www.secuobs.com/revue/news/318375.shtml Secuobs.com : 2011-07-21 07:13:08 - Recent changes en - uploaded File Open-source-icon-e1310696581917png New page http://www.secuobs.com/revue/news/318370.shtmlhttp://www.secuobs.com/revue/news/318370.shtml Secuobs.com : 2011-07-21 07:13:08 - Recent changes en - uploaded File 7 21 2011 12 59 42 PM tmp3EAAjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/318369.shtmlhttp://www.secuobs.com/revue/news/318369.shtml Secuobs.com : 2011-04-10 09:21:13 - Recent changes en - uploaded File 4 10 2011 7 38 23 AM tmp561Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/297380.shtmlhttp://www.secuobs.com/revue/news/297380.shtml Secuobs.com : 2011-04-10 08:36:39 - Recent changes en - uploaded File 4 10 2011 7 06 43 AM tmp616Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/297379.shtmlhttp://www.secuobs.com/revue/news/297379.shtml Secuobs.com : 2011-04-10 08:36:39 - Recent changes en - uploaded File 4 10 2011 7 14 27 AM tmp720Bjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/297378.shtmlhttp://www.secuobs.com/revue/news/297378.shtml Secuobs.com : 2011-04-10 08:36:39 - Recent changes en - Older revision Revision as of 06 14, 10 April 2011 Line 9 Line 9 Once that loads up, you can select on the INode types on the left to see the cases where they show up Once that loads up, you can select on the INode types on the left to see the cases where they show up Image 4_10_2011_7_06_43_AM_tmp616Fjpg Image 4_10_2011_7_06_43_AM_tmp616Fjpg You can do searches on the selected INode type in this find searching for WebMethod in the Attribute INodes Image 4_10_2011_7_10_52_AM_tmp29E2jpg and you can also do a global search on ALL INodes Image 4_10_2011_7_12_07_AM_tmp513Cjpg the list show on the Search Result TreeView is the unique list of string matches Image 4_10_2011_7_13_00_AM_tmp1D18jpg and the list that is show on the 'Source Code Lines' Treeview is a list of the source code lines that match the current selected item Image 4_10_2011_7_14_27_AM_tmp720Bjpg http://www.secuobs.com/revue/news/297377.shtmlhttp://www.secuobs.com/revue/news/297377.shtml Secuobs.com : 2011-04-10 06:29:22 - Recent changes en - uploaded File 4 10 2011 4 55 29 AM tmp57C1jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/297372.shtmlhttp://www.secuobs.com/revue/news/297372.shtml Secuobs.com : 2011-04-10 05:01:56 - Recent changes en - uploaded File 4 10 2011 3 19 27 AM tmp7DF1jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/297335.shtmlhttp://www.secuobs.com/revue/news/297335.shtml Secuobs.com : 2011-04-10 04:19:22 - Recent changes en - Older revision Revision as of 02 14, 10 April 2011 Line 1 Line 1 O2 supports the http codegooglecom p moq as NET Mocking framework which is very helpful when writing UnitTests and Pocs O2 supports the http codegooglecom p moq as NET Mocking framework which is very helpful when writing UnitTests and Pocs See O2 Script http o2platformwordpresscom 2011 04 05 mocking-httpcontext-httprequest-and-httpresponse-for-unittests-using-moq Mocking HttpContext HttpRequest and HttpResponse for UnitTests using Moq for an example of using Moq in O2 Moq desciprion from their website Moq desciprion from their website http://www.secuobs.com/revue/news/297334.shtmlhttp://www.secuobs.com/revue/news/297334.shtml Secuobs.com : 2011-04-10 04:19:22 - Recent changes en - Created page with 'To see a large list of script examples, take a look at the http o2platformwordpresscom website' New page To see a large list of script examples, take a look at the http o2platformwordpresscom website http://www.secuobs.com/revue/news/297333.shtmlhttp://www.secuobs.com/revue/news/297333.shtml Secuobs.com : 2010-11-03 19:47:01 - Recent changes en - Created page with 'This page contains a list of commonly used tools and software packages useful for example when building a VM image Windows Utils PDF Reader Sumatra PDF Open Sour ' New page This page contains a list of commonly used tools and software packages useful for example when building a VM image Windows Utils PDF Reader Sumatra PDF Open Source http blogkowalczykinfo software sumatrapdf home page , http kjkpubs3amazonawscom sumatrapdf rel SumatraPDF-11-installexe windows download Zip 7-zip Open Source http www7-ziporg home page , http downloadssourceforgenet sevenzip 7z465exe windows download http://www.secuobs.com/revue/news/262188.shtmlhttp://www.secuobs.com/revue/news/262188.shtml Secuobs.com : 2010-11-02 21:35:50 - Recent changes en - uploaded File 11 2 2010 6 26 56 PM tmpCD6jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/261906.shtmlhttp://www.secuobs.com/revue/news/261906.shtml Secuobs.com : 2010-11-02 21:35:50 - Recent changes en - uploaded File 11 2 2010 6 30 53 PM tmpCDCjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/261905.shtmlhttp://www.secuobs.com/revue/news/261905.shtml Secuobs.com : 2010-10-18 23:18:21 - Recent changes en - uploaded File 10 18 2010 8 17 17 PM tmpCBEjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/257995.shtmlhttp://www.secuobs.com/revue/news/257995.shtml Secuobs.com : 2010-10-18 21:18:31 - Recent changes en - uploaded File 10 18 2010 6 24 13 PM tmpB8Ajpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/257961.shtmlhttp://www.secuobs.com/revue/news/257961.shtml Secuobs.com : 2010-10-18 21:18:31 - Recent changes en - uploaded File 10 18 2010 6 32 01 PM tmpBA5jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/257960.shtmlhttp://www.secuobs.com/revue/news/257960.shtml Secuobs.com : 2010-10-18 21:18:31 - Recent changes en - uploaded File 10 18 2010 6 42 55 PM tmpBDBjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/257959.shtmlhttp://www.secuobs.com/revue/news/257959.shtml Secuobs.com : 2010-10-18 21:18:31 - Recent changes en - Older revision Revision as of 17 44, 18 October 2010 One intermediate revision not shown Line 10 Line 10 Save current Conversations Save current Conversations Load previously saved Conversations Load previously saved Conversations - IE Automation where a script is executed by IE and the traffic captured by WebScarab IE Automation via dynamically compiled O2 Scripts allowing the workflow where a dynamic script is executed by IE and the traffic captured by WebScarab Load and filter saved convertations Load and filter saved convertations as a SQL-like dynamic query using GUI that allows the real-time execution of NET LINQ Queries as a SQL-like dynamic query using GUI that allows the real-time execution of NET LINQ Queries Line 17 Line 17 Video Video youtubeDIwbtk5cAH0 youtubeDIwbtk5cAH0 - Screenshots Screenshots Line 31 Line 30 You can also automatically load and save conversations You can also automatically load and save conversations Image 10_18_2010_6_28_30_PM_tmpB90jpg Image 10_18_2010_6_28_30_PM_tmpB90jpg You can write dynamic web automation scripts that will be executed on an separate IE instance Image 10_18_2010_6_42_55_PM_tmpBDBjpg You can load previously saved conversations into a table viewer which allows dynamic SQL-like dynamic filtering using NET's LINQ queries You can load previously saved conversations into a table viewer which allows dynamic SQL-like dynamic filtering using NET's LINQ queries Image 10_18_2010_6_32_01_PM_tmpBA5jpg Image 10_18_2010_6_32_01_PM_tmpBA5jpg You can convert previously saved conversations in to O2Findings which can then be easily filtered You can convert previously saved conversations in to O2Findings which can then be easily filtered Image 10_18_2010_6_30_56_PM_tmpB97jpg Image 10_18_2010_6_30_56_PM_tmpB97jpg http://www.secuobs.com/revue/news/257958.shtmlhttp://www.secuobs.com/revue/news/257958.shtml Secuobs.com : 2010-10-15 20:21:07 - Recent changes en - uploaded File 10 15 2010 5 49 41 PM tmp44Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/257406.shtmlhttp://www.secuobs.com/revue/news/257406.shtml Secuobs.com : 2010-10-15 20:21:07 - Recent changes en - Older revision Revision as of 16 50, 15 October 2010 Line 1 Line 1 - This scripts shows how to use O2's Automation Engine API base on http whitecodeplexcom White to automate any windows process GUI in this case Notepad This scripts shows how to use O2's Automation Engine API base on http whitecodeplexcom CodePlex White project to automate any windows process GUI in this case Notepad Video Video youtubeas0Ov-Pfq7M Script Script The source for this script can be found on the local O2 Scripts folder, and can be http codegooglecom p o2platform source browse trunk O2_Scripts APIs Windows White PoCpourcents20-pourcents20Automatingpourcents20Notepadh2 viewed online at O2's SVN code repository Image 10_15_2010_5_49_41_PM_tmp44Fjpg http://www.secuobs.com/revue/news/257405.shtmlhttp://www.secuobs.com/revue/news/257405.shtml Secuobs.com : 2010-10-14 05:44:26 - Recent changes en - uploaded File 10 14 2010 3 53 28 AM tmp75DDjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/256817.shtmlhttp://www.secuobs.com/revue/news/256817.shtml Secuobs.com : 2010-10-14 05:44:26 - Recent changes en - New page __TOC__ This script helps with the encryption and decryption of text and files using PGP Features create PGP Keys store PGP configure on xml files which are easy to move around GUI to encrypt Text GUI to decrypt Text GUI to encrypt and decrypt Files Supports workflow where the PassPhase is kept private and the Public Private keys are sent unencrypted to the client Video Screenshots Welcome Screen Image 10_14_2010_3_47_26_AM_tmp75CFjpg Creating temp test PGP keys screenshot took after clicking on 'Create' Image 10_14_2010_3_48_57_AM_tmp75D5jpg Encrypting Text Image 10_14_2010_3_48_43_AM_tmp75D4jpg Decrypting Text Image 10_14_2010_3_49_10_AM_tmp75D8jpg Encrypting File Select File to Encrypt Image 10_14_2010_3_49_41_AM_tmp75D9jpg Encrypting File After clicking on 'Encrypt Selected File' Image 10_14_2010_3_50_49_AM_tmp75DAjpg Encrypting File Select File to Decrypt Image 10_14_2010_3_51_04_AM_tmp75DBjpg Encrypting File After clicking on 'Decrypt Selected File' Image 10_14_2010_3_51_21_AM_tmp75DCjpg Source Code The source for this script can be found on the local O2 Scripts folder, and can be http codegooglecom p o2platform source browse trunk O2_Scripts APIs OpenPgp Toolpourcents20-pourcents20Usingpourcents20OpenPgppourcents20topourcents20Encryptpourcents20orpourcents20Decrypth2 viewed online at O2's SVN code repository Image 10_14_2010_3_53_28_AM_tmp75DDjpg http://www.secuobs.com/revue/news/256816.shtmlhttp://www.secuobs.com/revue/news/256816.shtml Secuobs.com : 2010-10-10 14:59:43 - Recent changes en - uploaded File 10 10 2010 11 56 52 AM tmp4C7Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/255655.shtmlhttp://www.secuobs.com/revue/news/255655.shtml Secuobs.com : 2010-10-10 14:59:43 - Recent changes en - uploaded File 10 10 2010 11 59 24 AM tmp4C80jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/255654.shtmlhttp://www.secuobs.com/revue/news/255654.shtml Secuobs.com : 2010-10-10 13:38:56 - Recent changes en - uploaded File 10 10 2010 11 49 22 AM tmp4C6Bjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/255648.shtmlhttp://www.secuobs.com/revue/news/255648.shtml Secuobs.com : 2010-10-06 08:35:29 - Recent changes en - New page __TOC__ This script shows a Unit Test that checks for a patched XSS vulnerability in Twitter example of regression test The script is not 100pourcents automated due to the captcha requirement when adding new applications The vulnerability that this UnitTest covers is documented here http bug-zoneorg 2010 09 07 twitter-xss-vulnerability-by-sangteamtham Video YoutubeDpDiGpzaVw0 How it works This script executed as a UnitTest will Open a new Instance of IE in a separate window Check if there is a logged in user and if so, logout Login with a test account Go to devtwittercom Add an random application Asks the user to resolve the Captcha Go to the Manage Domains page Asserts that that the encoded payload does NOT exist on the current page Submits a couple paylods Asserts that the endoded DOES exist on the page close IE after 2 seconds Source Code using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2XRulesDatabaseAPIs using O2XRulesDatabaseUtils using O2XRulesDatabaseUtilsO2 using mshtml using NUnitFramework O2File Ref WatiN_IE_ExtensionMethodscs O2Ref WatiNCore1xdll O2Ref O2_External_IEdll O2Ref Microsoftmshtmldll O2Ref nunitframeworkdll namespace O2XRulesDatabaseUnitTests TestFixture public class BlackBox_PoCs_UnitTests string twitterID o2 Test_gpuCS o--2com string password Super Password checks for vulnerability described here Test public string XSS_Vuln_in_ManageDomains var ie about blank ie 0,0,800,600 logout if required ieopen http wwwtwittercom if iehasLink Sign out ielink Sign out click sign in with test account iefield username value twitterID iefield password value password iebutton Sign in click ieopen http devtwittercom ielink Your apps click ielink Register a new application click ielink Register a new app click var appName appName_ 5randomLetters var description description var website http wwwgooglecom var organization organization var callbackUrl http acom iefield client_application name ,appName iefield client_application description ,description iefield client_application url ,website iefield client_application organization ,organization iefield client_application callback_url ,callbackUrl var captchaUrl ieimages 3 url var captchaAnswer ascx_CaptchaQuestionaskQuestion captchaUrl iefield recaptcha_response_field ,captchaAnswer iebutton Register application click ieforms 1 Submit if iehasLink Manage Domains isFalse Application registration didn't work error return error ielink Manage Domains click finally first check that payload is not there var xssPayload alert 'aaa' AssertThat iehtml contains xssPayloadhtmlEncode isFalse , Endoded payload was in html page then submit the payloads and check again for the Encoded payload iefield host value xssPayload iebutton Authorize click iefield host value xssPayload iebutton Authorize click AssertThat iehtml contains xssPayloadhtmlEncode isFalse , Endoded payload was NOT in html page iecloseInNSeconds 2 return ok - XSS_Vuln_in_ManageDomains http://www.secuobs.com/revue/news/254637.shtmlhttp://www.secuobs.com/revue/news/254637.shtml Secuobs.com : 2010-10-06 07:04:47 - Recent changes en - uploaded File 10 6 2010 3 36 08 AM tmp1253jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254624.shtmlhttp://www.secuobs.com/revue/news/254624.shtml Secuobs.com : 2010-10-06 05:21:49 - Recent changes en - uploaded File 10 6 2010 2 57 17 AM tmpF456jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254618.shtmlhttp://www.secuobs.com/revue/news/254618.shtml Secuobs.com : 2010-10-06 05:21:49 - Recent changes en - Created page with 'This scripts shows the browser automation required to create an Twitter account The steps are Choose an email template which is expected to contain a 0 so that a random v ' New page This scripts shows the browser automation required to create an Twitter account The steps are Choose an email template which is expected to contain a 0 so that a random value can be inserted Choose an password Start Automation click on GO Resolve Captcha Screenshot default GUI Image 10_6_2010_2_54_19_AM_tmp3E79jpg adding to IE the required domains Image 10_6_2010_2_55_01_AM_tmpE181jpg we need to say yes to this one or the Captcha won't load Image 10_6_2010_2_55_53_AM_tmpAB79jpg Category Script Example Asking the user to resolve the captcha Image 10_6_2010_2_56_21_AM_tmp180Fjpg all worked OK, and ask user to check his email to confirm the new account Image 10_6_2010_2_57_17_AM_tmpF456jpg Source Code var topPanel O2Guiopen Tool - Twitter Account Creation ,800,500 var designerCanvas topPaneladd_DesignerCanvas designerCanvasadd_Label Twitter Account Creation ,00,00 fontSize 30 var step1_Label designerCanvasadd_Label step 1 enter the email template ,69,30 var step1_TextBox designerCanvasadd_TextBox ,70,250,150,20 designMode false var step2_Label designerCanvasadd_Label step 2 enter the password ,99,30 var step2_TextBox designerCanvasadd_TextBox ,100,250,150,20 designMode false var step3_Label designerCanvasadd_Label step 3 confirm values ,69,450 var dataGridView designerCanvasadd_WinForms_Control 69,580,200,113 add_DataGridView allowNewRows false var step4_Label designerCanvasadd_Label step 4 create account ,159,450 var step4_Button designerCanvasadd_Button GO ,160,250,150,20 designMode false var step5_Label designerCanvasadd_Label step 5 Account Creation say yes on all popups ,190,30 var step5_IE designerCanvasadd_WinForms_Control 230,25,760,200 add_IE designerCanvasconnect step1_Label, step1_TextBox designerCanvasconnect step2_Label, step2_TextBox designerCanvasconnect step2_TextBox, step3_Label designerCanvasadd_Connection step3_LabeldesignerItem , dataGridViewparent designerItem , Bottom , Left designerCanvasconnect step4_Label, step4_Button, Left , Right designerCanvasconnect step4_Button, step5_Label, Left , Top var twitterId var userName var userEmail var password Action updateValues var random5Letters 5randomLetters var emailFormat step1_TextBoxget_Text_Wpf password step2_TextBoxget_Text_Wpf twitterId Test_ random5Letters userName Test random5Letters userEmail emailFormatformat twitterId Action updateDataGridValues updateValues dataGridViewremove_Columns dataGridViewadd_Columns item , value dataGridViewcolumnWidth 0, 65 dataGridViewadd_Row Twitter ID ,twitterId dataGridViewadd_Row User Name ,userName dataGridViewadd_Row User Email ,userEmail dataGridViewadd_Row Password ,password step1_TextBoxonKeyPress_Wpf key updateDataGridValues step2_TextBoxonKeyPress_Wpf key updateDataGridValues step4_ButtononClick_Wpf var ie step5_IE ensire that there isn't an logged in session ieopen http wwwtwittercom if iehasLink Sign out ielink Sign out click open account creation page and populate the fields ieopen http apitwittercom signup ietextField user name scrollIntoView flash value userName flash ietextField user screen_name scrollIntoView flash value twitterId flash ietextField user user_password scrollIntoView flash value password flash ietextField user email scrollIntoView flash value userEmail flash iecheckBoxes 0 scrollIntoView flash uncheck flash iecheckBoxes 1 scrollIntoView flash uncheck flash iebuttons 1 scrollIntoView flash click ask user to resolve captcha var captchaUrl ieimages 4 src var captchaAnswer ascx_CaptchaQuestionaskQuestion captchaUrl iefield recaptcha_response_field scrollIntoView flash value captchaAnswer flash iebutton Finish scrollIntoView flash click alert user to check his email var step6_Label designerCanvasadd_Label step 6 Check your email and follow the account validation link ,440,25 designerCanvasconnect step5_Label, step6_Label, Left , Left step6_Labelcolor Red step1_TextBoxset_Text o2 0 o--2com step2_TextBoxset_Text Super Password updateDataGridValues step5_IEopen http googlecom O2File WatiN_IE_ExtensionMethodscs O2File DiagramDesigner_ExtensionMethodscs O2Ref DiagramDesignerexe O2Ref WindowsFormsIntegrationdll O2Ref O2_API_Visualizationdll O2Ref WatiNCore1xdll http://www.secuobs.com/revue/news/254617.shtmlhttp://www.secuobs.com/revue/news/254617.shtml Secuobs.com : 2010-10-05 18:54:02 - Recent changes en - uploaded File 10 5 2010 3 50 44 PM tmpA3ADjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254436.shtmlhttp://www.secuobs.com/revue/news/254436.shtml Secuobs.com : 2010-10-05 18:54:02 - Recent changes en - uploaded File 10 5 2010 3 56 22 PM tmpC8D1jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254435.shtmlhttp://www.secuobs.com/revue/news/254435.shtml Secuobs.com : 2010-10-05 18:54:02 - Recent changes en - uploaded File 10 5 2010 4 06 26 PM tmp1A0jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254434.shtmlhttp://www.secuobs.com/revue/news/254434.shtml Secuobs.com : 2010-10-05 17:39:26 - Recent changes en - uploaded File 10 5 2010 3 47 24 PM tmp9505jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254399.shtmlhttp://www.secuobs.com/revue/news/254399.shtml Secuobs.com : 2010-10-05 04:36:25 - Recent changes en - uploaded File 10 5 2010 2 15 46 AM tmp54F6jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/254274.shtmlhttp://www.secuobs.com/revue/news/254274.shtml Secuobs.com : 2010-10-05 04:36:25 - Recent changes en - Created page with 'This script shows how to use the Google's GeoLocation APIs to find the current user's physical location using the user's router Mac Address usually a Wireless network For mor ' New page This script shows how to use the Google's GeoLocation APIs to find the current user's physical location using the user's router Mac Address usually a Wireless network For more details on how this works see Samy's http samypl bh10 How I meet your Girlfriend BlackHat OWASP Tour presentation or this page http wwwsamypl mapxss Screenshot - Image 10_5_2010_2_15_46_AM_tmp54F6jpg Source code var topPanel O2Guiopen Tool - Find Physical Location via MAC Address using Google's APIs , 900,400 var noDataForMacAddress variable that will hold the default response to an not mapped mac address var tableList topPaneladd_TableList add_Columns IP Address , MACAdress , type var browser tableListinsert_Right topPanelwidth 2 add_WebBrowser_Control var topRightPanel browserinsert_Above 100 var macAddress_TextBox topRightPaneladd_Label Mac Address top 3 append_TextBox align_Right panel var jsonResponse_TextBox topRightPaneladd_Label Json Response ,25,0 bringToFront append_Control multiLine scrollBars height 80 align_Right topRightPanel widthAdd -200 Action getLocalMacAddresses var arpResult ProcessesstartAsCmdExe arp , -a var lines arpResultlines linesremove 0 remove 0 foreach var line in lines tableListadd_Row linesplit_onSpace Distinct toList remove Action showLocationInMap latitude, longitude var urlTemplate http mapsgooglecouk maps hl en q 0 1 format latitude, longitude browseropen urlTemplate Func getLocationFromMac macAddress var url http wwwgooglecom loc json var postData version 110 , request_address true, wifi_towers mac_address macAddress , ssid g , signal_strength -72 var response new Web getUrlContents_POST url,postData return response Action showMacAddressLocation macAddress macAddress_TextBoxset_Text macAddress jsonResponse_TextBoxset_Text jsonResponse_TextBoxbackColor ColorLightPink var response getLocationFromMac macAddress if responsecontains noDataForMacAddress jsonResponse_TextBoxset_Text There was no data for this Mac address else if responsevalid var jsonResponse JObjectParse response if jsonResponsestr valid jsonResponse_TextBoxset_Text jsonResponsestr var latitude jsonResponse location latitude str var longitude jsonResponse location longitude str found values latitude 0 longitude 1 debug latitude,longitude showLocationInMap latitude,longitude jsonResponse_TextBoxbackColor ColorWhite responseinfo else jsonResponse_TextBoxset_Text no data received tableListafterSelect row if rowsize 1 var selectedMacAddress row 0 items 1 Text showMacAddressLocation selectedMacAddress macAddress_TextBoxonEnter text showMacAddressLocation textreplace , - this gets a default request so that we can detect when there is no data in Google's Database noDataForMacAddress getLocationFromMac ff-ff-ff-ff-ff-ff if noDataForMacAddressvalid noDataForMacAddresssize 50 noDataForMacAddress noDataForMacAddressSubstring 0,noDataForMacAddresssize - 40 noDataForMacAddressinfo getLocalMacAddresses showMacAddressLocation 00-11-24-ec-72-cf test with Samy's address from http wwwsamypl mapxss using NewtonsoftJsonLinq O2Ref NewtonsoftJsondll http://www.secuobs.com/revue/news/254273.shtmlhttp://www.secuobs.com/revue/news/254273.shtml Secuobs.com : 2010-10-01 17:21:32 - Recent changes en - uploaded a new version of File O2 Commercial Services Oct 2010png New page http://www.secuobs.com/revue/news/253497.shtmlhttp://www.secuobs.com/revue/news/253497.shtml Secuobs.com : 2010-10-01 13:54:02 - Recent changes en - New page From version v15, O2 is using TiddlyWiki to build parts of its GUI and for a number of documentation pages TittlyWiki is sponsored and maintained by BT http wwwosmosoftcom bt and is an interesting case-study of corporate sponsorship of Open Source projects see http jermolenecom 2007 08 05 how-to-start-a-successful-open-source-project Starting A Successful Open Source Project blog post by http jermolenecom Jeremy Ruston Web References http wwwtiddlywikicom http wwwunamesaorg projectshtml http tiddlywikiorg wiki Main_Page TiddlyWiki variations http wwwripplerapcom http tiddlywikiorg wiki MonkeyGTD http tiddlyspotcom page gallery http giffmextiddlyspotcom http tiddlythemescom Help http tidhelptiddlyspotcom http twhelptiddlyspotcom Category 3rd Party APIs Category 3rd Party APIs TiddlyWiki http://www.secuobs.com/revue/news/253455.shtmlhttp://www.secuobs.com/revue/news/253455.shtml Secuobs.com : 2010-10-01 13:54:02 - Recent changes en - Older revision Revision as of 10 05, 1 October 2010 Line 1 Line 1 Note see http pediapresscom saved_book saved_book http://www.secuobs.com/revue/news/253454.shtmlhttp://www.secuobs.com/revue/news/253454.shtml Secuobs.com : 2010-09-22 21:36:11 - Recent changes en - uploaded File 9 22 2010 6 16 09 PM tmp38D4jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/250765.shtmlhttp://www.secuobs.com/revue/news/250765.shtml Secuobs.com : 2010-09-22 21:36:11 - Recent changes en - uploaded File 9 22 2010 6 18 09 PM tmp38D6jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/250764.shtmlhttp://www.secuobs.com/revue/news/250764.shtml Secuobs.com : 2010-09-22 21:36:11 - Recent changes en - Older revision Revision as of 17 18, 22 September 2010 Line 2 Line 2 So far there is one custom version on the works, with more to come So far there is one custom version on the works, with more to come Image 9_22_2010_6_18_09_PM_tmp38D6jpg Dinis Cruz 'Security Consultant' version Dinis Cruz 'Security Consultant' version http://www.secuobs.com/revue/news/250763.shtmlhttp://www.secuobs.com/revue/news/250763.shtml Secuobs.com : 2010-09-22 20:00:15 - Recent changes en - uploaded File 9 22 2010 5 36 57 PM tmp38AFjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/250727.shtmlhttp://www.secuobs.com/revue/news/250727.shtml Secuobs.com : 2010-09-22 20:00:15 - Recent changes en - New page This example shows how to use O2's Net Static Analysis Engine AST based to automatically patch the source code and make all ResponseWrite methods safe by wrapping them with the AntiXssHtmlEncode method screenshots the script sourcecode included at the end of this article is also available inside the O2's Scripts folder Image 9_22_2010_5_28_37_PM_tmp3868jpg when executed double-click , the following GUI will appear Image 9_22_2010_5_29_32_PM_tmp3870jpg the code on the left is loaded from the file RequestWritecs also included in the O2 Scripts folder Image 9_22_2010_5_32_04_PM_tmp3873jpg the code on the right has been automatically created and patched note how the code on the left has a direct RequestWrite invocation Image 9_22_2010_5_33_27_PM_tmp3874jpg and the code on the right has the same call using an AntiXssHtmlEncode method Image 9_22_2010_5_34_21_PM_tmp3875jpg the patching is done in real time So for example if we change the original RequestWrite invocation and add another new method Image 9_22_2010_5_36_24_PM_tmp38AEjpg the code on the right will automatically reflect the changes Image 9_22_2010_5_36_57_PM_tmp38AFjpg sourcecode panelclear var topPanel panel var topPanel O2Guiopen Fixing ResponseWrite ,1000,500 var controls topPaneladd_1x1 Original Code , Patched Code var originalCode controls 0 add_SourceCodeEditor var patchedCode controls 1 add_SourceCodeEditor originalCodeeDocumentDataChanged text if textvalid var csharpAst textcsharpAst showinfo csharpAstCompilationUnitiNodes foreach var invocationExpression in csharpAstCompilationUnitiNodes var memberReference invocationExpressionTargetObject as MemberReferenceExpression if memberReferencenotNull memberReferenceMemberName Write var className AntiXss var methodName HtmlEncode var newMemberReference new MemberReferenceExpression new IdentifierExpression className ,methodName var newInvocationExpression new InvocationExpression newMemberReference newInvocationExpressionArgumentsAddRange invocationExpressionArguments invocationExpressionArgumentsClear invocationExpressionArgumentsAdd newInvocationExpression csharpAstCompilationUnitadd_Using MicrosoftSecurityApplication var patchedCSharpCode csharpAstCompilationUnitcsharpCode patchedCSharpCode O2Ref AntiXSSLibrarydll line patchedCSharpCode so that it compiles OK var patchedCSharpFile patchedCSharpCodesaveWithExtension cs patchedCodeopen patchedCSharpFile var originalFile RequestWritecs local originalCodeopen originalFile using ICSharpCodeNRefactoryParser using ICSharpCodeNRefactoryAst using ICSharpCodeNRefactory using O2APIASTCSharp using O2APIASTExtensionMethods using O2APIASTExtensionMethodsCSharp O2Ref O2_API_ASTdll Category Script Example http://www.secuobs.com/revue/news/250726.shtmlhttp://www.secuobs.com/revue/news/250726.shtml Secuobs.com : 2010-09-22 03:39:22 - Recent changes en - New page The following are other open source APIs or Tools to add support to O2 if there is a need for them Potential Open Source Tools Template engine http wwwstringtemplateorg C Use-Case http use-case-makersourceforgenet C http wwwmonoumlorg C Xml Editors http sourceforgenet projects dlxmleditor files C http xml-copy-editorsourceforgenet not sure http wwwsyntextcom products serna-free not sure - There is another non-OpenSource version Rules Engine http droolsdotnetcodehausorg Utils http wwwosaltcom - database of Open Source alternatives to closed-source tools Category O2 Development http://www.secuobs.com/revue/news/250542.shtmlhttp://www.secuobs.com/revue/news/250542.shtml Secuobs.com : 2010-09-20 18:33:37 - Recent changes en - uploaded File 9 20 2010 3 40 48 PM tmp2C9Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/249867.shtmlhttp://www.secuobs.com/revue/news/249867.shtml Secuobs.com : 2010-09-20 18:33:37 - Recent changes en - New page __TOC__ There are lots of new features in this version, including a new GUI Main Page Image 9_20_2010_3_37_39_PM_tmp2C87jpg Browser Automation BlackBox Testing Image 9_20_2010_3_38_12_PM_tmp2C8Ajpg NET Security Testing Image 9_20_2010_3_38_33_PM_tmp2C8Djpg Use OWASP Projects Image 9_20_2010_3_38_54_PM_tmp2C90jpg Other tools or APIs Image 9_20_2010_3_39_30_PM_tmp2C93jpg Create Scripts APIs Image 9_20_2010_3_39_47_PM_tmp2C96jpg Buy O2 Image 9_20_2010_3_40_30_PM_tmp2C99jpg Help Image 9_20_2010_3_40_48_PM_tmp2C9Cjpg Category O2 Releases http://www.secuobs.com/revue/news/249866.shtmlhttp://www.secuobs.com/revue/news/249866.shtml Secuobs.com : 2010-09-20 14:51:06 - Recent changes en - uploaded File 9 20 2010 12 47 52 PM tmp2B78jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/249797.shtmlhttp://www.secuobs.com/revue/news/249797.shtml Secuobs.com : 2010-09-20 14:51:06 - Recent changes en - uploaded File 9 20 2010 12 53 02 PM tmp2B7Bjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/249796.shtmlhttp://www.secuobs.com/revue/news/249796.shtml Secuobs.com : 2010-09-20 14:51:06 - Recent changes en - Older revision Revision as of 11 53, 20 September 2010 Line 37 Line 37 Private discusion forum with 24h max response time Private discusion forum with 24h max response time Officially recognized as 'O2 Platform GOLD Service Provider' Officially recognized as 'O2 Platform GOLD Service Provider' Current Subscribers Image 9_20_2010_12_53_02_PM_tmp2B7Bjpg Custom development Custom development http://www.secuobs.com/revue/news/249795.shtmlhttp://www.secuobs.com/revue/news/249795.shtml Secuobs.com : 2010-07-29 20:03:36 - Recent changes en - changed group membership for User Dcuthbert from none to Administrators New page http://www.secuobs.com/revue/news/245130.shtmlhttp://www.secuobs.com/revue/news/245130.shtml Secuobs.com : 2010-07-28 22:36:13 - Recent changes en - Created page with ' List al HTML tags in document var tag, tags tags The tags in the page are for i 0 i var tag, tags tags The tags in the page are for i 0 i r n tag documentwrite tags Category Javascript Category Exploit http://www.secuobs.com/revue/news/244782.shtmlhttp://www.secuobs.com/revue/news/244782.shtml Secuobs.com : 2010-07-28 09:57:52 - Recent changes en - New page With the objective to create a funding source for O2's development, the following Pledges have been set-up at Pledgiecom '''O2 Specific''' http pledgiecom campaigns 12114 O2 Platform - Release 20 Other FOSS projects consumed by O2 '''Framework specific'''' http pledgiecom campaigns 12134 O2 Platform - 'SharePoint MOSS' Rule Pack http pledgiecom campaigns 12114 O2 Platform - 'ASPNET MVC' Rule Pack J2EE Struts J2EE Spring MVC '''Industry sector specific'''' BlackBox WhiteBox WAF http://www.secuobs.com/revue/news/244529.shtmlhttp://www.secuobs.com/revue/news/244529.shtml Secuobs.com : 2010-07-26 02:59:29 - Recent changes en - New page Script samples of Finding's Filtering Batch replace path details in findings and traces var file PostMessageExploitozasmt local var pathToFind C O2 DemoData HacmeBank_WebSite_FLAT_VIEW 2nd Batch var pathToReplace C O2 O2Scripts_Database Scripts DataFiles MethodStreams filereplaceFilePathsInFile pathToFind, pathToReplace return done return o2Findings using O2InterfacesO2Findings using O2XRulesDatabaseFindings O2File Findings_ExtensionMethods_Gui_Viewerscs O2File Findings_DemoDatacs Category O2 Script Category O2Findings http://www.secuobs.com/revue/news/243737.shtmlhttp://www.secuobs.com/revue/news/243737.shtml Secuobs.com : 2010-07-26 02:59:29 - Recent changes en - Created page with 'Scripts and tools to handle findings' New page Scripts and tools to handle findings http://www.secuobs.com/revue/news/243736.shtmlhttp://www.secuobs.com/revue/news/243736.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with '3rd Party Apis' New page 3rd Party Apis http://www.secuobs.com/revue/news/242818.shtmlhttp://www.secuobs.com/revue/news/242818.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'BlackBox' New page BlackBox http://www.secuobs.com/revue/news/242817.shtmlhttp://www.secuobs.com/revue/news/242817.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Documentation' New page Documentation http://www.secuobs.com/revue/news/242816.shtmlhttp://www.secuobs.com/revue/news/242816.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'FAQ' New page FAQ http://www.secuobs.com/revue/news/242815.shtmlhttp://www.secuobs.com/revue/news/242815.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'J2EE related pages' New page J2EE related pages http://www.secuobs.com/revue/news/242814.shtmlhttp://www.secuobs.com/revue/news/242814.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Help' New page Help http://www.secuobs.com/revue/news/242813.shtmlhttp://www.secuobs.com/revue/news/242813.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'pages about the O2 XRules Database module' New page pages about the O2 XRules Database module http://www.secuobs.com/revue/news/242812.shtmlhttp://www.secuobs.com/revue/news/242812.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Support pages' New page Support pages http://www.secuobs.com/revue/news/242811.shtmlhttp://www.secuobs.com/revue/news/242811.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Pages about multiple vulnerable Apps' New page Pages about multiple vulnerable Apps http://www.secuobs.com/revue/news/242810.shtmlhttp://www.secuobs.com/revue/news/242810.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Pages about OWASP's WebGoat Vulnerable App by design ' New page Pages about OWASP's WebGoat Vulnerable App by design http://www.secuobs.com/revue/news/242809.shtmlhttp://www.secuobs.com/revue/news/242809.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - deleted Script Example Quick RTF based Text Editor content was ' REDIRECT Script Example View Details of current Internet Explorer instances' and the only contributor was 'Admin' New page http://www.secuobs.com/revue/news/242808.shtmlhttp://www.secuobs.com/revue/news/242808.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Older revision Revision as of 08 42, 22 July 2010 Line 1 Line 1 Using WatiN to create a GMail account This script shows how to implement a complex workflow using O2's scripting capabilities and WatiN's web automation API This script shows how to implement a complex workflow using O2's scripting capabilities and WatiN's web automation API Line 85 Line 86 - Category Script Category O2 Script Category 3rd Party APIs WatiN Category 3rd Party APIs WatiN http://www.secuobs.com/revue/news/242807.shtmlhttp://www.secuobs.com/revue/news/242807.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - deleted Category XScript content was 'XScripts Move to category Script ' and the only contributor was 'Admin' New page http://www.secuobs.com/revue/news/242806.shtmlhttp://www.secuobs.com/revue/news/242806.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Older revision Revision as of 08 49, 22 July 2010 Line 85 Line 85 -- -- - Category Category Script Example http://www.secuobs.com/revue/news/242805.shtmlhttp://www.secuobs.com/revue/news/242805.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - deleted Category Misc Internal Pages content was 'Misc Internal Pages' and the only contributor was 'O2user' New page http://www.secuobs.com/revue/news/242804.shtmlhttp://www.secuobs.com/revue/news/242804.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Requested API changes' New page Requested API changes http://www.secuobs.com/revue/news/242803.shtmlhttp://www.secuobs.com/revue/news/242803.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Help pages for the scripts dynamically compiled and executed in O2 most O2 modules and tools are created from one of theses scripts ' New page Help pages for the scripts dynamically compiled and executed in O2 most O2 modules and tools are created from one of theses scripts http://www.secuobs.com/revue/news/242802.shtmlhttp://www.secuobs.com/revue/news/242802.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - uploaded File 7 22 2010 9 58 10 AM tmp3123jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/242801.shtmlhttp://www.secuobs.com/revue/news/242801.shtml Secuobs.com : 2010-07-22 12:38:17 - Recent changes en - Created page with 'Script used for quick development of PoCs or O2 Modules screenshots Image 7_22_2010_9_58_00_AM_tmp3122jpg Image 7_22_2010_9_58_10_AM_tmp3123jpg Category O2 ' New page Script used for quick development of PoCs or O2 Modules screenshots Image 7_22_2010_9_58_00_AM_tmp3122jpg Image 7_22_2010_9_58_10_AM_tmp3123jpg Category O2 Script http://www.secuobs.com/revue/news/242800.shtmlhttp://www.secuobs.com/revue/news/242800.shtml Secuobs.com : 2010-07-21 23:44:44 - Recent changes en - deleted O2 Script Using WatiN to inside WPF content was ' REDIRECT O2 Script Using WatiN inside WPF' and the only contributor was 'Admin' New page http://www.secuobs.com/revue/news/242638.shtmlhttp://www.secuobs.com/revue/news/242638.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - New page For Javascript parsing O2 uses the Jint API Javascript Interpreter for NET which can be found at http jintcodeplexcom There are a number of modules that use this api for example the O2 Platform - Javascript AST Viewer video http wwwyoutubecom watch v pqY_6-P-xU Category 3rd Party APIs Category 3rd Party APIs Jint http://www.secuobs.com/revue/news/242141.shtmlhttp://www.secuobs.com/revue/news/242141.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - deleted PoC Development CRSF content was ' REDIRECT PoC Development CSRF' and the only contributor was 'Admin' New page http://www.secuobs.com/revue/news/242140.shtmlhttp://www.secuobs.com/revue/news/242140.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - Older revision Revision as of 15 50, 20 July 2010 4 intermediate revisions not shown Line 4 Line 4 Other relevant posts Other relevant posts http wwww3org TR html401 interact formshtml http wwwhtmlcodetutorialcom forms FORM_ENCTYPEhtml http wwwhtmlcodetutorialcom forms FORM_ENCTYPEhtml http referencesitepointcom html form enctype http wwwcaptainat howto-ajax-form-post-requestphp AJAX Form POST Request - HTML Form POST Submit with AJAX Javascript Example Tutorial http stackoverflowcom questions 782879 can-a-xml-rpc-request-be-made-from-an-html-form Can a XML-RPC request be made from an html form http stackoverflowcom questions 782879 can-a-xml-rpc-request-be-made-from-an-html-form Can a XML-RPC request be made from an html form http articlessitepointcom article ajax-jquery 3 , http apijquerycom jQueryajax , http docsjquerycom Tutorials Getting_Started_with_jQuery , http wwwbennadelcom blog 1853-Posting-XML-SOAP-Requests-With-jQueryhtm http wwwcgisecuritycom csrf-faqhtml post http wwwowasporg indexphp Cross-Site_Request_Forgery , http wwwowasporg indexphp Testing_for_CSRF_pourcents28OWASP-SM-005pourcents29 http msdnmicrosoftcom en-us library cc838250pourcents28VS95pourcents29aspx crossdomain_communication , http msdnmicrosoftcom en-us library cc709423pourcents28VS85pourcents29aspx http wwwwebreferencecom programming javascript definitive4 , http wwwjibberingcom 2002 4 httprequesthtml http://www.secuobs.com/revue/news/242139.shtmlhttp://www.secuobs.com/revue/news/242139.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - uploaded File 7 20 2010 5 02 57 PM tmpB5Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/242138.shtmlhttp://www.secuobs.com/revue/news/242138.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - uploaded File 7 20 2010 5 20 54 PM tmpCDDjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/242137.shtmlhttp://www.secuobs.com/revue/news/242137.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - uploaded File 7 20 2010 5 26 33 PM tmpD59jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/242136.shtmlhttp://www.secuobs.com/revue/news/242136.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - uploaded File 7 20 2010 5 29 41 PM tmpD6Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/242135.shtmlhttp://www.secuobs.com/revue/news/242135.shtml Secuobs.com : 2010-07-20 19:18:54 - Recent changes en - Older revision Revision as of 16 30, 20 July 2010 Line 3 Line 3 Create C file form WSDL Create C file form WSDL - The first step is to create C file the target WSDL To do so you can use the DotNet_SDK_WSDLcs script that uses the NET SDK's wsdlexe tool under the hood The first step is to create a C file that represents the the target WSDL To do so you can use the DotNet_SDK_WSDLcs script that uses the NET SDK's wsdlexe tool under the hood Image 7_20_2010_4_54_20_PM_tmpACDjpg Image 7_20_2010_4_54_20_PM_tmpACDjpg Line 55 Line 57 Image 7_20_2010_5_16_06_PM_tmpC62jpg Image 7_20_2010_5_16_06_PM_tmpC62jpg - take a look the available methods you can use Note To take a look the available methods you can use the following code snippet return C O2 tempDir 7-20-2010 AmazonSearchServicecs compile types return C O2 tempDir 7-20-2010 AmazonSearchServicecs compile types - Image jpg Image 7_20_2010_5_29_41_PM_tmpD6Cjpg Invoking the WebService The following script show a complete example of creating an object and making a request The following script show a complete example of creating an object and making a request Line 81 Line 85 - The only problem with that you will get the error The only problem with this script is that you will get the error Image 7_20_2010_5_25_20_PM_tmpD58jpg Image 7_20_2010_5_25_20_PM_tmpD58jpg - is created by the fact that this WSDL service from Amazon is no available note to self pick a better wsdl next time which is created by the fact that this WSDL service from Amazon is no available note-to-self pick a better wsdl next time Image 7_20_2010_5_26_33_PM_tmpD59jpg Image 7_20_2010_5_26_33_PM_tmpD59jpg http://www.secuobs.com/revue/news/242134.shtmlhttp://www.secuobs.com/revue/news/242134.shtml Secuobs.com : 2010-07-16 15:59:44 - Recent changes en - uploaded File 7 16 2010 1 22 27 PM tmpF81Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/241146.shtmlhttp://www.secuobs.com/revue/news/241146.shtml Secuobs.com : 2010-07-16 15:59:44 - Recent changes en - Older revision Revision as of 13 00, 16 July 2010 2 intermediate revisions not shown Line 1 Line 1 - This script allows the creation of avi movies from screenshots This script allows the creation of avi movies from screenshots - If you can't movies If you can't create movies - To the movies you will need the WMV3 codec If you get an error while creating the movies, it most likely means that you don't have installed To create the movies you will need the WMV3 codec If you get an error while creating the movies, it most likely means that you don't have this installed - To get the WMV3 Codec you will need to Windows Media Video 9 VCM which you can http wwwmicrosoftcom downloads detailsaspx familyid 0C99C648-5800-4AA3-A2FE-3DE948689DB8 displaylang en get from the Microsoftcom website or from http o2platformgooglecodecom svn trunk O2pourcents20-pourcents20Allpourcents20Activepourcents20Projects 3rdPartyDlls FilesWithNoCode wmv9VCMsetupexe the O2 SVN dll archive To get the WMV3 Codec you will need to installedthe Windows Media Video 9 VCM which you can http wwwmicrosoftcom downloads detailsaspx familyid 0C99C648-5800-4AA3-A2FE-3DE948689DB8 displaylang en get from the Microsoftcom website or from http o2platformgooglecodecom svn trunk O2pourcents20-pourcents20Allpourcents20Activepourcents20Projects 3rdPartyDlls FilesWithNoCode wmv9VCMsetupexe the O2 SVN dll archive Screenshot Screenshot Image 7_16_2010_1_22_27_PM_tmpF81Cjpg Image 7_16_2010_1_22_27_PM_tmpF81Cjpg http://www.secuobs.com/revue/news/241145.shtmlhttp://www.secuobs.com/revue/news/241145.shtml Secuobs.com : 2010-07-13 13:47:54 - Recent changes en - Created page with ' July 7th - adtmagcom http adtmagcom blogs watersworks 2010 07 open-source-security-o2-platform-betaaspx Securing Software OWASP Releases O2 Platform Beta ' New page July 7th - adtmagcom http adtmagcom blogs watersworks 2010 07 open-source-security-o2-platform-betaaspx Securing Software OWASP Releases O2 Platform Beta http://www.secuobs.com/revue/news/240027.shtmlhttp://www.secuobs.com/revue/news/240027.shtml Secuobs.com : 2010-07-12 16:33:17 - Recent changes en - Created page with 'This Javascript PoC will show two different messages depending if the page loaded takes less then the delayOnLoggedInPage value To detect the login status, find an admin page t ' New page This Javascript PoC will show two different messages depending if the page loaded takes less then the delayOnLoggedInPage value To detect the login status, find an admin page that will load slower if the user is logged in and other for example redirect the user to the login page var page ' POST LOGIN PAGE TO LOAD ' var delayOnLoggedInPage 1000 function loadImage var startTime new Date getTime var image new Image imagesrc page imageonerror function var now new Date getTime var delay now - startTime documentwrite delay if delay delayOnLoggedInPage documentwrite Logged in at new Date else documentwrite Not Logged in documentwrite startTime startTime documentwrite now now documentlocation page loadImage http://www.secuobs.com/revue/news/239678.shtmlhttp://www.secuobs.com/revue/news/239678.shtml Secuobs.com : 2010-07-10 08:58:32 - Recent changes en - uploaded File 7 10 2010 6 28 04 AM tmpC30Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/239363.shtmlhttp://www.secuobs.com/revue/news/239363.shtml Secuobs.com : 2010-07-10 08:58:32 - Recent changes en - Created page with 'This version contains an expanded version of the previous GUI Image 7_10_2010_6_28_04_AM_tmpC30Fjpg for more details see OWASP O2 Platform v12 Beta' New page This version contains an expanded version of the previous GUI Image 7_10_2010_6_28_04_AM_tmpC30Fjpg for more details see OWASP O2 Platform v12 Beta http://www.secuobs.com/revue/news/239362.shtmlhttp://www.secuobs.com/revue/news/239362.shtml Secuobs.com : 2010-07-10 06:01:19 - Recent changes en - Created page with 'Welcome O2 user this is the page opened by default in the new O2 GUI In here you will find the latest news, videos and links to new documentation pages Latest News 10 ' New page Welcome O2 user this is the page opened by default in the new O2 GUI In here you will find the latest news, videos and links to new documentation pages Latest News 10 July New release v12 Beta Updated GUI Larger application surface Main O2 Logo resized and placed at the top still allows drag'n'drop and mouse clicks actions open this page when O2 is launched Left-hand-side links are not stacked up vs side-by-side Faster GUI loads Now after the first execution of the GUI script O2 Main WPF GUIh2 , the dll created is stored in the execution direction and used the next time the GUI is loaded this reduces the load time from about 15s to 2s Dedicated storage of Scripts The scipts that belong to v12 Beta are now stored inside an Scripts v1x folder and are NOT auto-synced witht the SVN server this is now only enabled for the ClickOnce version Numerous updates to support APIs WatiN support for direct HTTP POST requests, support for pop-up detection and auto pop-up close InputSimulator Support for moving clicking mouse either by relative position or targeted at a particular windows control Findings wraped large parts of the existing Findings utils into easy to consume extension methods http://www.secuobs.com/revue/news/239348.shtmlhttp://www.secuobs.com/revue/news/239348.shtml Secuobs.com : 2010-07-09 19:22:39 - Recent changes en - uploaded File 7 9 2010 4 41 20 PM tmpA95Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/239186.shtmlhttp://www.secuobs.com/revue/news/239186.shtml Secuobs.com : 2010-07-09 19:22:39 - Recent changes en - uploaded File 7 9 2010 4 43 06 PM tmpA95Djpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/239185.shtmlhttp://www.secuobs.com/revue/news/239185.shtml Secuobs.com : 2010-07-09 19:22:39 - Recent changes en - Older revision Revision as of 15 44, 9 July 2010 One intermediate revision not shown Line 13 Line 13 Image 7_9_2010_4_41_20_PM_tmpA95Cjpg Image 7_9_2010_4_41_20_PM_tmpA95Cjpg Image 7_9_2010_4_43_06_PM_tmpA95Djpg - Category Support Category Support http://www.secuobs.com/revue/news/239184.shtmlhttp://www.secuobs.com/revue/news/239184.shtml Secuobs.com : 2010-07-09 19:22:39 - Recent changes en - uploaded File 7 9 2010 4 44 50 PM tmpA95Ejpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/239183.shtmlhttp://www.secuobs.com/revue/news/239183.shtml Secuobs.com : 2010-07-09 19:22:39 - Recent changes en - New page Based on feedback from Daniel Cuthbert, here is an updated version of the O2 Gui where the left-hand-side links are now shown 'one per line' versus 'side by side' the original version One problem with this GUI is that with the current number of links that exist in some of the Tabs, the height of the main GUI has to be set to 700 pixels Image 7_9_2010_4_44_50_PM_tmpA95Ejpg This change has already been committed to the O2 rules SVN, so the users with 32 bit should be automatically updated and the How to - Manually update the rules using the 'Sync Rules Database via Svn' wizard64 bit crowd need to do it manually Category GUI http://www.secuobs.com/revue/news/239182.shtmlhttp://www.secuobs.com/revue/news/239182.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - Created page with 'These are the O2 Releases' New page These are the O2 Releases http://www.secuobs.com/revue/news/237781.shtmlhttp://www.secuobs.com/revue/news/237781.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - uploaded File 7 5 2010 3 18 24 PM tmp90A4jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/237780.shtmlhttp://www.secuobs.com/revue/news/237780.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - uploaded File 7 5 2010 3 35 13 PM tmp90C1jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/237779.shtmlhttp://www.secuobs.com/revue/news/237779.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - uploaded File 7 5 2010 3 39 06 PM tmp90C8jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/237778.shtmlhttp://www.secuobs.com/revue/news/237778.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - Older revision Revision as of 15 20, 5 July 2010 One intermediate revision not shown Line 1 Line 1 - '''Windows installer''' http o2platformgooglecodecom files OWASPpourcents20O2pourcents20Platformpourcents20pourcents28v1pourcents20Betapourcents29msi OWASP O2 Platform v11 Beta msi for the OWASP O2 platform version 11 Beta released on 5th July 2010 '''Latest Release 5th July 2010 - v11 Beta''' O2 Release v11 BetaSee screenshots here '''Windows installer''' http o2platformgooglecodecom files OWASPpourcents20O2pourcents20Platformpourcents20pourcents28v11pourcents20Betapourcents29msi OWASP O2 Platform v11 Beta msi for the OWASP O2 platform version 11 Beta released on 5th July 2010 Image 6_22_2010_7_08_23_PM_tmp9E4jpg link http o2platformgooglecodecom files OWASPpourcents20O2pourcents20Platformpourcents20pourcents28v11pourcents20Betapourcents29msi Image 6_22_2010_7_08_23_PM_tmp9E4jpg link http o2platformgooglecodecom files OWASPpourcents20O2pourcents20Platformpourcents20pourcents28v11pourcents20Betapourcents29msi http://www.secuobs.com/revue/news/237777.shtmlhttp://www.secuobs.com/revue/news/237777.shtml Secuobs.com : 2010-07-05 21:29:47 - Recent changes en - Older revision Revision as of 15 26, 5 July 2010 Line 16 Line 16 Image 7_5_2010_3_29_20_PM_tmp90BEjpg Image 7_5_2010_3_29_20_PM_tmp90BEjpg - Tab Penetration Testing Tab 1 Penetration Testing Image 7_5_2010_3_34_36_PM_tmp90BFjpg Image 7_5_2010_3_34_36_PM_tmp90BFjpg - Tab Source-Code Reviews Tab 2 Source-Code Reviews Image 7_5_2010_3_34_51_PM_tmp90C0jpg Image 7_5_2010_3_34_51_PM_tmp90C0jpg - Tab Productivity Tools Tab 3 Productivity Tools Image 7_5_2010_3_35_13_PM_tmp90C1jpg Image 7_5_2010_3_35_13_PM_tmp90C1jpg - Tab Windows Tools Tab 4 Windows Tools Image 7_5_2010_3_36_35_PM_tmp90C2jpg Image 7_5_2010_3_36_35_PM_tmp90C2jpg - Tab OWASP Projects Tab 5 OWASP Projects Image 7_5_2010_3_37_14_PM_tmp90C3jpg Image 7_5_2010_3_37_14_PM_tmp90C3jpg - Tab 3rd Partty Closed Open Source Tab 6 3rd Partty Closed Open Source Image 7_5_2010_3_37_37_PM_tmp90C4jpg Image 7_5_2010_3_37_37_PM_tmp90C4jpg - Tab API Development Environment Tab 7 API Development Environment Image 7_5_2010_3_38_13_PM_tmp90C5jpg Image 7_5_2010_3_38_13_PM_tmp90C5jpg - Tab Videos Tab 8 Videos Image 7_5_2010_3_38_27_PM_tmp90C6jpg Image 7_5_2010_3_38_27_PM_tmp90C6jpg - Tab Demos Tab 9 Demos Image 7_5_2010_3_38_44_PM_tmp90C7jpg Image 7_5_2010_3_38_44_PM_tmp90C7jpg - Tab Help Tab 10 Help Image 7_5_2010_3_39_06_PM_tmp90C8jpg Image 7_5_2010_3_39_06_PM_tmp90C8jpg Category O2 Releases Category O2 Releases http://www.secuobs.com/revue/news/237776.shtmlhttp://www.secuobs.com/revue/news/237776.shtml Secuobs.com : 2010-07-05 00:38:41 - Recent changes en - Older revision Revision as of 20 43, 4 July 2010 Line 1 Line 1 - that contain references to the O2 API WatiN WaitN web automation framework that is widely used in O2 Pages that contain references to the O2 API WatiN WaitN web automation framework that is widely used in O2 http://www.secuobs.com/revue/news/237589.shtmlhttp://www.secuobs.com/revue/news/237589.shtml Secuobs.com : 2010-07-05 00:38:41 - Recent changes en - Older revision Revision as of 20 47, 4 July 2010 2 intermediate revisions not shown Line 1 Line 1 - For Web Automation O2 uses the WatiN NET framework http watinsourceforgenet which inspired the Ruby http wwwopenqaorg watir Watir framework __TOC__ For Web Automation O2 uses the WatiN NET framework http watinsourceforgenet which was inspired by the Ruby http wwwopenqaorg watir Watir framework WatiN is very powerful and it really solved well the problem of opening complete web pages and exposing its assets via easy to consume objects WatiN is very powerful and it really solved well the problem of opening complete web pages and exposing its assets via easy to consume objects Line 8 Line 9 http codegooglecom p o2platform source browse trunk O2_Scripts APIs Windows WatiN WatiN - Open 'Test Recorder' in new processh2 Open 'Test Recorder' in new processh2 - Simple script that can be used to start the WatiN's recorder http codegooglecom p o2platform source browse trunk O2_Scripts APIs Windows WatiN WatiN - Open 'Test Recorder' in new processh2 Open 'Test Recorder' in new processh2 - Simple script that can be used to start the WatiN's recorder - Note that this version uses WatiN 1x branch since at the time it was integrated into O2 , the 2x was not very stable the source code currently used was imported into O2's '3rd party Dlls' code tree and can be seen here http codegooglecom p o2platform source browse trunk trunk SourceCode_3rdParty_Dlls WatIN Note that this version uses WatiN 1x branch since at the time it was integrated into O2 , the 2x was not very stable the source code currently used was imported into O2's '3rd party Dlls' code tree and can be seen here http codegooglecom p o2platform source browse trunk trunk SourceCode_3rdParty_Dlls WatIN trunk SourceCode_3rdParty_Dlls WatIN example of O2's watin use example of O2's watin use - Here is an example of how WatiN's is integrated into O2's Web Unit Test scripting worfkow and allows for the creation of simple scripts that perform complex tasks In this case this is a HacmeBank where it is possible to login into the Admin section by using a value stored into the Admin's login page ViewState Here is an example of how WatiN's is integrated into O2's Web Unit Test scripting worfkow and allows for the creation of simple scripts that perform complex tasks In this case this is a HacmeBank vulnerability where it is possible to login into the Admin section by using a value stored into the Admin's login page ViewState Line 31 Line 32 - PoCs and APIs that use WatiN Some of the PoCs Scripts and APIs that use WatiN http codegooglecom p o2platform source browse trunk O2_Scripts APIs GMail API_GMailcs API_GMailcs http codegooglecom p o2platform source browse trunk O2_Scripts APIs GMail API_GMailcs API_GMailcs http codegooglecom p o2platform source browse trunk O2_Scripts APIs BTOpenZone API_BTOpenZonecs API_BTOpenZonecs http codegooglecom p o2platform source browse trunk O2_Scripts APIs BTOpenZone API_BTOpenZonecs API_BTOpenZonecs http://www.secuobs.com/revue/news/237588.shtmlhttp://www.secuobs.com/revue/news/237588.shtml Secuobs.com : 2010-06-29 08:23:45 - Recent changes en - Created page with 'HacmeBank related files' New page HacmeBank related files http://www.secuobs.com/revue/news/235970.shtmlhttp://www.secuobs.com/revue/news/235970.shtml Secuobs.com : 2010-06-29 08:23:45 - Recent changes en - Created page with 'Files related to O2 support for the analysis of NET Framework applications' New page Files related to O2 support for the analysis of NET Framework applications http://www.secuobs.com/revue/news/235969.shtmlhttp://www.secuobs.com/revue/news/235969.shtml Secuobs.com : 2010-06-29 08:23:45 - Recent changes en - Older revision Revision as of 04 47, 29 June 2010 Line 59 Line 59 __NOEDITSECTION__ __NOEDITSECTION__ Category Vulnerable Apps Category DotNet Category HacmeBank http://www.secuobs.com/revue/news/235968.shtmlhttp://www.secuobs.com/revue/news/235968.shtml Secuobs.com : 2010-06-29 08:23:45 - Recent changes en - Older revision Revision as of 04 53, 29 June 2010 Line 70 Line 70 Category Vulnerable Apps Category Vulnerable Apps Category J2EE Category J2EE Category Videos Category WebGoat Category WebGoat http://www.secuobs.com/revue/news/235967.shtmlhttp://www.secuobs.com/revue/news/235967.shtml Secuobs.com : 2010-06-29 01:38:16 - Recent changes en - Older revision Revision as of 22 26, 28 June 2010 Line 4 Line 4 Video Video - bFOWs42cF3Q YoutubebFOWs42cF3Q http://www.secuobs.com/revue/news/235870.shtmlhttp://www.secuobs.com/revue/news/235870.shtml Secuobs.com : 2010-06-29 01:38:16 - Recent changes en - New page For the cases where we have a VB project and want to bring it into CSharp, the following script can be used to convert create CSharp to from VBNet Videos DotNet - Convert CSharp into VBNet Youtube3eVeG2Pwa4U DotNet - Convert VBNet into CSharp YoutubeiJQfXxccT_w Source Code var topPanel O2Guiopen Util - Convert VB to CSharp or CSharp to VB ,640,480 var mainGui topPaneladd_1x1 Files , Source Code ,true, 200 var code mainGui 1 add_1x1 CSharp , VBNet ,false var sourceFiles mainGui 0 add_TreeView showSelection var csharpCode code 0 add_SourceCodeViewer var vbCode code 1 add_SourceCodeViewer var targetDirectory PublicDIconfiggetTempFolderInTempDirectory DotNet_CodeTransformation var actionsPanel sourceFilesparent insert_Above 100 add_GroupBox Options Func transformFile_CS_to_VB fullPath, virtualPath var astCSharp new Ast_CSharp fullPath var transformedFile targetDirectorypathCombine virtualPath transformedFile transformedFilereplaceLast cs , vb transformedFiledirectoryName createDir astCSharpAstDetailsVBNetCodesave transformedFile transformed 0 - 1 info virtualPath, transformedFile return transformedFile Func transformFile_VB_to_CS fullPath, virtualPath var astCSharp new Ast_CSharp fullPath var transformedFile targetDirectorypathCombine virtualPath transformedFile transformedFilereplaceLast vb , cs transformedFiledirectoryName createDir astCSharpAstDetailsCSharpCodesave transformedFile transformed 0 - 1 info virtualPath, transformedFile return transformedFile Action transformAllFiles foreach var node in sourceFilesnodes var fullPath string nodeget_Tag if fullPathextension vb transformFile_VB_to_CS fullPath, nodeget_Text else transformFile_CS_to_VB fullPath, nodeget_Text break Action setTargetDirectory path targetDirectory path Action loadFilesFromDirectory path sourceFilesclear var targetFiles pathfiles cs ,true targetFilesAddRange pathfiles vb ,true foreach var file in targetFiles var nodeText fileremove path sourceFilesadd_Node nodeText, file sourceFilesafterSelect file if fileextension cs csharpCodeopen file var newFile transformFile_CS_to_VB file, sourceFilesselected get_Text vbCodeopen newFile if fileextension vb vbCodeopen file var newFile transformFile_VB_to_CS file, sourceFilesselected get_Text csharpCodeopen newFile vbCodeset_Text astCSharpAstDetailsVBNetCode, avb var sourceComboBox topPanelinsert_Above 25 add_LabelAndComboBoxAndButton Source folder , , load ,loadFilesFromDirectory controls var targetComboBox topPanelinsert_Above 25 add_LabelAndComboBoxAndButton Target folder , , create ,setTargetDirectory controls actionsPaneladd_Button Transform All ,0,0, transformAllFiles fill sourceComboBoxsendKeys PublicDIconfigLocalScriptsFolderline targetComboBoxset_Text targetDirectory thissleep 1000 sourceFilesselectFirst using O2ExternalSharpDevelopAST using O2APIASTExtensionMethods using O2APIASTExtensionMethodsCSharp O2Ref O2_API_ASTdll O2Ref QuickGraphdll Category Languages_and_Frameworks Category DotNet Category Videos http://www.secuobs.com/revue/news/235869.shtmlhttp://www.secuobs.com/revue/news/235869.shtml Secuobs.com : 2010-06-28 23:29:41 - Recent changes en - New page This page contains raw scripts that the early stages of other scripts -- -- -- -- Category Raw Scripts http://www.secuobs.com/revue/news/235816.shtmlhttp://www.secuobs.com/revue/news/235816.shtml Secuobs.com : 2010-06-28 23:29:41 - Recent changes en - Older revision Revision as of 18 11, 28 June 2010 Line 36 Line 36 O2File C O2 XRules_Local Extra_methodscs O2File C O2 XRules_Local Extra_methodscs using O2LocalScript using O2LocalScript Category O2 APIs http://www.secuobs.com/revue/news/235815.shtmlhttp://www.secuobs.com/revue/news/235815.shtml Secuobs.com : 2010-06-28 23:29:41 - Recent changes en - Created page with 'Detailed information about the multiple APIs supported by O2' New page Detailed information about the multiple APIs supported by O2 http://www.secuobs.com/revue/news/235814.shtmlhttp://www.secuobs.com/revue/news/235814.shtml Secuobs.com : 2010-06-28 20:16:10 - Recent changes en - uploaded File 6 28 2010 5 33 51 PM tmp42B6jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235775.shtmlhttp://www.secuobs.com/revue/news/235775.shtml Secuobs.com : 2010-06-28 20:16:10 - Recent changes en - uploaded File 6 28 2010 5 51 08 PM tmp4368jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235774.shtmlhttp://www.secuobs.com/revue/news/235774.shtml Secuobs.com : 2010-06-28 18:37:51 - Recent changes en - uploaded File 6 28 2010 3 59 21 PM tmp3E3Cjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235744.shtmlhttp://www.secuobs.com/revue/news/235744.shtml Secuobs.com : 2010-06-28 18:37:51 - Recent changes en - uploaded File 6 28 2010 4 27 13 PM tmp3E9Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235743.shtmlhttp://www.secuobs.com/revue/news/235743.shtml Secuobs.com : 2010-06-28 18:37:51 - Recent changes en - uploaded File 6 28 2010 4 34 18 PM tmp3EE2jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235742.shtmlhttp://www.secuobs.com/revue/news/235742.shtml Secuobs.com : 2010-06-28 18:37:51 - Recent changes en - uploaded File 6 28 2010 4 42 44 PM tmp3FF9jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235741.shtmlhttp://www.secuobs.com/revue/news/235741.shtml Secuobs.com : 2010-06-28 18:37:51 - Recent changes en - Older revision Revision as of 15 44, 28 June 2010 2 intermediate revisions not shown Line 55 Line 55 - Image jpg Image 6_28_2010_4_34_18_PM_tmp3EE2jpg - Once we have that list we will want to extract the title attribute value var wikiApi new OwaspWikiAPI false var xml wikiApiexUrlUsage wwwaneesoftcom xmlFormat var xRoot xmlxRoot var pages xRootelement query element exturlusage elements eu attributes title values eu return pages Image 6_28_2010_4_42_44_PM_tmp3FF9jpg http://www.secuobs.com/revue/news/235740.shtmlhttp://www.secuobs.com/revue/news/235740.shtml Secuobs.com : 2010-06-28 17:12:43 - Recent changes en - uploaded File 6 28 2010 2 40 17 PM tmp3B0Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/235683.shtmlhttp://www.secuobs.com/revue/news/235683.shtml Secuobs.com : 2010-06-22 23:55:13 - Recent changes en - uploaded File 6 22 2010 7 07 03 PM tmp9E0jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233963.shtmlhttp://www.secuobs.com/revue/news/233963.shtml Secuobs.com : 2010-06-20 20:21:23 - Recent changes en - uploaded File 6 20 2010 6 27 23 PM tmp5B3jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233321.shtmlhttp://www.secuobs.com/revue/news/233321.shtml Secuobs.com : 2010-06-20 20:21:23 - Recent changes en - New page This page contains raw scripts that the early stages of other scripts Screenshot of control or desktop '''details ''' take screenshot of a control to take a screenshot from the desktop use textAreascreenshot panelclear var textArea paneladd_TextArea set_Text this is a test width 100 height 100 fill false return textAreascreenshot -- -- Category Raw Scripts http://www.secuobs.com/revue/news/233320.shtmlhttp://www.secuobs.com/revue/news/233320.shtml Secuobs.com : 2010-06-20 05:09:29 - Recent changes en - New page This page contains raw scripts that the early stages of other scripts FluidKit '''details''' first tests on FluidKit element flow panelclear var wpfHost paneladd_WpfHost var actions wpfHostinsert_Above 25 wpfHostinvokeOnThread try var grid WPFGrid wpfHostadd_Control var grid new WPFGrid - 0 format grid is SystemWindowsMarkupIAddChild info var label new WPFLabel set asd gridChildrenAdd label var test new TransitionTester var transContainer new TransitionPresenter transContainerName transContainer transContainerMouseLeftButtonDown SwitchImage transContainerRestDuration 0 0 3 transContainerIsLooped True transContainerTransition StaticResource SlideTransition var image1 new WPFImage image1Source new MediaImagingBitmapImage C Downloads fluidkit-44626 FluidKitSamples Transition Images img1jpg uri image1Name image1 image1Stretch SystemWindowsMediaStretchFill var image2 new WPFImage image2Source new MediaImagingBitmapImage C Downloads fluidkit-44626 FluidKitSamples Transition Images img2jpg uri image2Name image2 image2Stretch SystemWindowsMediaStretchFill var image3 new WPFImage image3Source new MediaImagingBitmapImage C O2 tempDir 6-18-2010 tmp7527tmpgif uri image3Stretch SystemWindowsMediaStretchFill transContainerinvoke AddChild ,image2 transContainerinvoke AddChild ,image1 transContainerItemsAdd image3 transContainerItemsAdd image2 transContainerItemsAdd image1 FlipTransition transition Resources FlipTransition as FlipTransition var transition new CubeTransition transitionRotation DirectionLeftToRight transContainerTransition transition transContainerApplyTransition image1 , image2 gridChildrenAdd transContainer var transition new CubeTransition var transition new SlideTransition transitionRotation DirectionRightToLeft transitionDuration new WDuration TimeSpanFromSeconds 1 transitionDuration new WDuration TimeSpanFromMilliseconds 500 transContainerTransition transition TransitionContainerApplyTransition O2Logo , Image1 MethodInvoker left left info transitionRotation DirectionRightToLeft transitionDirection DirectionRightToLeft wpfHostinvokeOnThread transContainerApplyTransition image1, image2 transContainerApplyTransition image2, image3 MethodInvoker right right info transitionRotation DirectionLeftToRight transitionDirection DirectionLeftToRight wpfHostinvokeOnThread transContainerApplyTransition image1, image2 ApplicationDoEvents left actionsadd_Link a ,0,0,left actionsadd_Link b ,0,200,right ApplicationDoEvents ApplicationDoEvents thissleep 1000 transContainerApplyTransition image1, image2 all ok debug catch Exception ex exlog return ok return null using FluidKitSamplesTransition using FluidKitSamplesView3D using FluidKitSamplesElementFlow using FluidKitControlsView3D using FluidKitControls using SystemWindowsControls using SystemWindowsMarkup using W SystemWindows using O2APIVisualizationExtensionMethods using WPF SystemWindowsControls using Media SystemWindowsMedia O2Ref C Downloads fluidkit-44626 FluidKitSamples bin Debug FluidKitSamplesdll O2Ref C Downloads fluidkit-44626 FluidKit bin Debug FluidKitdll O2Ref O2_API_Visualizationdll O2Ref PresentationCoredll O2Ref PresentationFrameworkdll O2Ref WindowsBasedll O2Ref SystemCoredll O2Ref WindowsFormsIntegrationdll O2Ref GraphSharpdll O2Ref QuickGraphdll O2Ref GraphSharpControlsdll WPF WrapPanel test '''details''' figuring out the best way to present images tumbnails panelclear var folderWithImages C O2 tempDir 6-18-2010 For Video var wpfHost paneladd_WpfHost var actions wpfHostinsert_Above 25 wpfHostinvokeOnThread var grid WPFGrid wpfHostadd_Control var label new WPFLabel set asd gridChildrenAdd label var wrapPanel new WPFWrapPanel gridChildrenAdd wrapPanel wrapPanelChildrenAdd label wrapPanelChildrenAdd new WPFButton Width 100, Content click 1 wrapPanelChildrenAdd new WPFButton Width 100, Content click 2 wrapPanelChildrenAdd new WPFButton Width 100, Content click 3 WrapPanel using SystemWindowsControls using SystemWindowsMarkup using W SystemWindows using O2APIVisualizationExtensionMethods using WPF SystemWindowsControls using Media SystemWindowsMedia O2Ref O2_API_Visualizationdll O2Ref PresentationCoredll O2Ref PresentationFrameworkdll O2Ref WindowsBasedll O2Ref SystemCoredll O2Ref WindowsFormsIntegrationdll O2Ref GraphSharpdll O2Ref QuickGraphdll O2Ref GraphSharpControlsdll O2Ref FluidKitdll O2Ref ICSharpCodeAvalonEditdll FluidKit PoCs '''details''' code snippets created when testing the multiple FluidKit controls panelclear var wpfHost paneladd_WpfHost wpfHostinvokeOnThread try var hostGrid WPFGrid wpfHostadd_Control FluidKit controls Ballon Decorator var ballon new BalloonDecorator ballonBackground MediaBrushesAzure ballonPointerLength 20 ballonCornerRadius 10 ballonBorderBrush MediaBrushesBlack ballonContent asdas ballonWidth 100 ballonHeight 100 var bg new Grid ballonChild bg var textBlock new TextBlock textBlockText this is a text sdfs dlfkj sadlkfjadslkf jadslkf textBlockTextWrapping WTextWrappingWrap textBlockHorizontalAlignment WHorizontalAlignmentCenter textBlockVerticalAlignment WVerticalAlignmentCenter textBlockFontStyle WFontStylesItalic textBlockTextTrimming WTextTrimmingWordEllipsis bgChildrenAdd textBlock hostGrid GlassWindow var gw new GlassWindowExample gridChildrenAdd label gridChildrenAdd gw var sample new SampleGlassWindow showinfo sample sampleShow sampleOpacity 05 3D vIEW var d3 new View3DExample showinfo d3View3D d3infoTypeName var model new Cylinder var model new Cube modelFaceBrush new MediaLinearGradientBrush MediaColorsLightBlue, MediaColorsAzure, 90 modelFaceBrushOpacity 05 modelEdgePen new MediaPen MediaBrushesBlack, 1 custom double side 50 modelPoints new List new SystemWindowsMediaMedia3DPoint3D side , - side , side , new SystemWindowsMediaMedia3DPoint3D side, side, side , new SystemWindowsMediaMedia3DPoint3D -side, side, side , new SystemWindowsMediaMedia3DPoint3D -side, -side, side , new SystemWindowsMediaMedia3DPoint3D side, -side, -side , new SystemWindowsMediaMedia3DPoint3D side, side, -side , new SystemWindowsMediaMedia3DPoint3D -side, side, -side , new SystemWindowsMediaMedia3DPoint3D -side, -side, -side modelFaces new List new 0, 4, 5, 1 , new 1, 5, 6, 2 , new 2, 6, 7, 3 , new 3, 7, 4, 0 , new 4, 5, 6, 7 , new 0, 1, 2, 3 , modelFacePoints 4 var dockPanel WPFDockPanel d3Content size 0 info dockPanelChildren 2 typeName var view3DPresenter View3DPresenter dockPanelChildren 2 view3DPresenterinfoTypeName view3DPresenterChildrenAdd model Element flow var label new WPFLabel set asd gridChildrenAdd label var elementFlow new ElementFlowExample gridChildrenAdd elementFlow InputSimulator move mouse and click on button '''details''' testing the latest version of the InputSimulator library, namely its Mouse instrumentation capabilities Click on button var sim new InputSimulator var screenWidth SystemWindowsFormsScreenPrimaryScreenWorkingAreaWidth var screenHeight SystemWindowsFormsScreenPrimaryScreenWorkingAreaHeight screenWidthstr info var xDelta double 65535 double screenWidth 65535 var yDelta double 65535 double screenHeight -3 65535 panelclear var button1 paneladd_Button 1 - ,50,40 var location1 button1PointToScreen PointEmpty var xPos double location1X double xDelta var yPos double location1Y double yDelta simMouseMoveMouseToPositionOnVirtualDesktop 0, 0 thissleep 500 x xDelta screenWidth double interval y yDelta screenHeight double interval X 0 Y 1 debug xPos,yPos simMouseMoveMouseToPositionOnVirtualDesktop xPos, yPos thissleep 500 simMouseMoveMouseBy 5,5 simMouseLeftButtonDown thissleep 500 simMouseLeftButtonUp thissleep 500 simMouseMoveMouseToPositionOnVirtualDesktop xPos 2, yPos 2 thissleep 2000 return null var x double 0 var y double 0 var interval 50 for int i 0 i Splicer PoC video '''details''' trying to use Splicer to create Videos from Screnshots -- video creation panelclear var topPanel paneladd_Panel var tabControl topPaneladd_TabControl var videoPlayer topPanelinsert_Right topPanelwidth 2 add_Video var bitmaps new List var cropper panelcropper newInThread croppershowConfig cropperincludeMouse for int i 0 i try var outputFile PublicDIconfiggetTempFileInTempDirectory wmv outputFile 0 info outputFile var imagesFolder C Documents and Settings Administrator My Documents Downloads splicer-49146 src Splicer bin Debug var images imagesFolderfiles jpg var timeline new DefaultTimeline var group timelineAddVideoGroup 32 bitCount , 160 width ,100 height var videoTrack groupAddTrack foreach var bitmat in var clip1 videoTrackAddImage images 0 ,0 offset ,2 clipEnd var clip2 videoTrackAddImage images 1 ,0,2 var clip3 videoTrackAddImage images 2 ,0,2 var clip4 videoTrackAddImage images 3 ,0,2 showinfo timeline var audioTrack timelineAddAudioGroup AddTrack var audio audioTrackAddAudio imagesFolderpathCombine testinputwav ,videoTrackDuration var renderer new WindowsMediaRenderer timeline, outputFile, WindowsMediaProfilesHighQualityVideo before render debug rendererRender after render debug if outputFilefileExists videoPlayerplay outputFile file exists 0 info outputFilefileExists catch Exception ex exlog while creating video return timeline return done return images using SplicerWindowsMedia using SplicerRenderer using SplicerTimeline O2File API_WindowsMediaPlayercs O2File API_Croppercs -- -- Category Raw Scripts http://www.secuobs.com/revue/news/233262.shtmlhttp://www.secuobs.com/revue/news/233262.shtml Secuobs.com : 2010-06-20 05:09:29 - Recent changes en - Created page with 'Category Scripts' New page Category Scripts http://www.secuobs.com/revue/news/233261.shtmlhttp://www.secuobs.com/revue/news/233261.shtml Secuobs.com : 2010-06-20 05:09:29 - Recent changes en - Created page with 'Jint - Javascript Interpreter for NET available at http jintcodeplexcom project descriiption from http jintcodeplexcom ''Jint is a script engine based on the J ' New page Jint - Javascript Interpreter for NET available at http jintcodeplexcom project descriiption from http jintcodeplexcom ''Jint is a script engine based on the Javascript language Using Jint, developers can provide fully scriptable applications, execute NET code without compiling, or create external configuration logic, using the most used script language Jint aims at providing every JavaScript functionalities to NET applications, and bindings to NET languages can be done in both sides Jint scripts can use any NET object from your application, and use every part of the NET base class library'' http://www.secuobs.com/revue/news/233260.shtmlhttp://www.secuobs.com/revue/news/233260.shtml Secuobs.com : 2010-06-20 05:09:29 - Recent changes en - Older revision Revision as of 01 49, 20 June 2010 Line 19 Line 19 Image 6_20_2010_12_11_39_AM_tmp87E8jpg Image 6_20_2010_12_11_39_AM_tmp87E8jpg - Category Languages_and_Frameworks Category Javascript Category Languages_and_Frameworks Category Javascript Category 3rd Party APIs Jint http://www.secuobs.com/revue/news/233259.shtmlhttp://www.secuobs.com/revue/news/233259.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 16 19 AM tmp87F4jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233233.shtmlhttp://www.secuobs.com/revue/news/233233.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 22 26 AM tmp87F8jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233232.shtmlhttp://www.secuobs.com/revue/news/233232.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 29 27 AM tmp87FDjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233231.shtmlhttp://www.secuobs.com/revue/news/233231.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 34 27 AM tmp87FEjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233230.shtmlhttp://www.secuobs.com/revue/news/233230.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 35 59 AM tmp87FFjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233229.shtmlhttp://www.secuobs.com/revue/news/233229.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 41 06 AM tmp880Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233228.shtmlhttp://www.secuobs.com/revue/news/233228.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 43 02 AM tmp8810jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233227.shtmlhttp://www.secuobs.com/revue/news/233227.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 51 26 AM tmp883Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233226.shtmlhttp://www.secuobs.com/revue/news/233226.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 12 53 28 AM tmp8848jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233225.shtmlhttp://www.secuobs.com/revue/news/233225.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - Older revision Revision as of 23 57, 19 June 2010 3 intermediate revisions not shown Line 43 Line 43 which using the default google page and 'Images' Html Element will show-up before the Images link which using the default google page and 'Images' Html Element will show-up before the Images link Screenshots Deploy script Screenshots Deploy script Line 56 Line 58 Image 6_20_2010_12_39_40_AM_tmp880Ejpg Image 6_20_2010_12_39_40_AM_tmp880Ejpg to allow this script to run on an separate IE window, change the first two lines to allow this script to run on an separate IE window, change the first two lines - panelclear panelclear var ie paneladd_IE silent true var ie paneladd_IE silent true - with this with this - var panel2 O2Guiopen XSS PoC Demo ,400,400 var panel2 O2Guiopen XSS PoC Demo ,400,400 panelclear panelclear var ie panel2add_IE silent true var ie panel2add_IE silent true - so that the script looks like this so that the script looks like this - var panel2 O2Guiopen XSS PoC Demo ,400,400 var panel2 O2Guiopen XSS PoC Demo ,400,400 panelclear panelclear Line 88 Line 91 using O2XRulesDatabaseUtilsO2 using O2XRulesDatabaseUtilsO2 O2Ref WatiNCore1xdll O2Ref WatiNCore1xdll - - - to save script, right-click on the bottom panel and chose the option to save script, right-click on the bottom panel and chose the option Line 96 Line 97 save save - Image jpg Image 6_20_2010_12_41_06_AM_tmp880Fjpg then chose a location and a name then chose a location and a name - Image jpg Image 6_20_2010_12_43_02_AM_tmp8810jpg the file will be saved with the h2 extension which is an XML version of the current script , and can be directly invoked by dragging and dropping it into the big O2 logo of the 'O2 XRules Database' application the file will be saved with the h2 extension which is an XML version of the current script , and can be directly invoked by dragging and dropping it into the big O2 logo of the 'O2 XRules Database' application - Image jpg Image 6_20_2010_12_53_28_AM_tmp8848jpg - Category Languages_and_Frameworks Category Javascript Category BlackBox Category Languages_and_Frameworks Category Javascript Category BlackBox http://www.secuobs.com/revue/news/233224.shtmlhttp://www.secuobs.com/revue/news/233224.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - Created page with 'Javascript related pages' New page Javascript related pages http://www.secuobs.com/revue/news/233223.shtmlhttp://www.secuobs.com/revue/news/233223.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - Older revision Revision as of 00 11, 20 June 2010 Line 1 Line 1 - the Languages and Frameworks Pages related to the multipe Languages and Frameworks supported by O2 http://www.secuobs.com/revue/news/233222.shtmlhttp://www.secuobs.com/revue/news/233222.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 1 27 31 AM tmp884Fjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233221.shtmlhttp://www.secuobs.com/revue/news/233221.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - uploaded File 6 20 2010 1 31 05 AM tmp8855jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233220.shtmlhttp://www.secuobs.com/revue/news/233220.shtml Secuobs.com : 2010-06-20 03:32:15 - Recent changes en - Older revision Revision as of 00 32, 20 June 2010 One intermediate revision not shown Line 17 Line 17 Screenshots Screenshots - default view Image 6_20_2010_1_31_05_AM_tmp8855jpg Tab Javascript - View Ast Tree Tab Javascript - View Ast Tree Line 38 Line 39 Tab JScript View Ast Elements Tab JScript View Ast Elements - for performance reasons this tab is not automatically loaded To see its data, tick the 'Render this view' check box for performance reasons this tab is not automatically loaded To see its data, tick the 'Render this view' check box Image 6_20_2010_1_25_21_AM_tmp884Ejpg Image 6_20_2010_1_25_21_AM_tmp884Ejpg - and you should see a list of AST types available in the current script and you should see a list of AST types available in the current script Image 6_20_2010_1_24_59_AM_tmp884Djpg Image 6_20_2010_1_24_59_AM_tmp884Djpg http://www.secuobs.com/revue/news/233219.shtmlhttp://www.secuobs.com/revue/news/233219.shtml Secuobs.com : 2010-06-20 01:33:23 - Recent changes en - uploaded File 6 19 2010 11 33 43 PM tmp87A9jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233207.shtmlhttp://www.secuobs.com/revue/news/233207.shtml Secuobs.com : 2010-06-20 01:33:23 - Recent changes en - uploaded File 6 19 2010 11 35 37 PM tmp87ACjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233206.shtmlhttp://www.secuobs.com/revue/news/233206.shtml Secuobs.com : 2010-06-20 01:33:23 - Recent changes en - uploaded File 6 19 2010 11 50 15 PM tmp87D4jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/233205.shtmlhttp://www.secuobs.com/revue/news/233205.shtml Secuobs.com : 2010-06-20 01:33:23 - Recent changes en - Older revision Revision as of 22 50, 19 June 2010 Line 1 Line 1 FAQ about installation issues FAQ about installation issues - If I'm running on a 64 bit machine how do I the SVN rules If I'm running on a 64 bit machine how do I install the SVN rules The built in SVN update for the O2 XRules Database only works for 32bit machines, so if you are using a 64bit box, use the manual SVN sync The built in SVN update for the O2 XRules Database only works for 32bit machines, so if you are using a 64bit box, use the manual SVN sync - O2 download the rules file to your computer http o2platformgooglecodecom svn trunk O2_Scripts Utils O2 Wizardpourcents20-pourcents20Syncpourcents20XRulespourcents20Viapourcents20Svncso2 - open the O2 XRules Database and drag and drop that script into the main O2 logo - - open the O2 XRules drag and drop into the main O2 logo Image 6_19_2010_11_33_43_PM_tmp87A9jpg Image 6_19_2010_11_33_43_PM_tmp87A9jpg Line 16 Line 14 Image 6_19_2010_11_35_37_PM_tmp87ACjpg Image 6_19_2010_11_35_37_PM_tmp87ACjpg click next and the rules download will start Image 6_19_2010_11_45_29_PM_tmp87D3jpg once the wizard is finished, in the main O2 XRules database gui, double click on the logo and you should see the pop-up window called 'O2 - Available Scripts' populated with the latest version of the O2 scripts Image 6_19_2010_11_50_15_PM_tmp87D4jpg If I'm running on a 64 bit machine how do I update the SVN rules note this only apply after the first installation of the rules see previous question Now that you have the rules, you can use the script that does the sync of the O2 rules via http download open O2 XRules Database Image 6_19_2010_11_28_44_PM_tmp87A1jpg double-click on the O2 logo to open the window with the available scripts Select the script Utils - O2 - Wizard - Sync XRules via SVNcso2 you can drag and drop it into the main O2 logo or just double click on it Image 6_19_2010_11_33_43_PM_tmp87A9jpg http://www.secuobs.com/revue/news/233204.shtmlhttp://www.secuobs.com/revue/news/233204.shtml Secuobs.com : 2010-06-19 04:57:13 - Recent changes en - Created page with 'Examples of O2 Scripts' New page Examples of O2 Scripts http://www.secuobs.com/revue/news/233078.shtmlhttp://www.secuobs.com/revue/news/233078.shtml Secuobs.com : 2010-06-19 04:57:13 - Recent changes en - Older revision Revision as of 02 00, 19 June 2010 One intermediate revision not shown Line 5 Line 5 SourceCode SourceCode - var panel O2Guiopen Simple File Search ,800,500 var panel O2Guiopen Simple File Search ,800,500 Line 33 Line 33 treeViewafterSelect text codeViewerset_Text text treeViewafterSelect text codeViewerset_Text text - Category Script Example Category Script Example http://www.secuobs.com/revue/news/233077.shtmlhttp://www.secuobs.com/revue/news/233077.shtml Secuobs.com : 2010-06-17 15:47:48 - Recent changes en - Older revision Revision as of 12 22, 17 June 2010 Line 19 Line 19 RedirectMatch a-z http o2platformcom wiki 1 RedirectMatch a-z http o2platformcom wiki 1 Category O2Platformcom internal page http://www.secuobs.com/revue/news/232475.shtmlhttp://www.secuobs.com/revue/news/232475.shtml Secuobs.com : 2010-06-17 15:47:48 - Recent changes en - Older revision Revision as of 12 22, 17 June 2010 Line 1 Line 1 Create template to add to-dos Create template to add to-dos Create a webpage to map the security vulnerabilities of these extensions and where to get the latest reviewed version , like the ones flagged to be Admin MediaWiki_Extensionsadded to this site Create a webpage to map the security vulnerabilities of these extensions and where to get the latest reviewed version , like the ones flagged to be Admin MediaWiki_Extensionsadded to this site Category O2Platformcom internal page http://www.secuobs.com/revue/news/232474.shtmlhttp://www.secuobs.com/revue/news/232474.shtml Secuobs.com : 2010-06-17 15:47:48 - Recent changes en - Created page with 'O2 related Downloads' New page O2 related Downloads http://www.secuobs.com/revue/news/232473.shtmlhttp://www.secuobs.com/revue/news/232473.shtml Secuobs.com : 2010-06-17 15:47:48 - Recent changes en - Created page with 'Internal pages to this wwwo2platformcom website' New page Internal pages to this wwwo2platformcom website http://www.secuobs.com/revue/news/232472.shtmlhttp://www.secuobs.com/revue/news/232472.shtml Secuobs.com : 2010-06-17 15:47:48 - Recent changes en - deleted Test - renamed content was 'this is a test page The preview happens 'on Enter' To add a screenshot, just paste it from the clipboard Image 5_18_2010_3_16_25_PM_tmp3466jpg' New page http://www.secuobs.com/revue/news/232471.shtmlhttp://www.secuobs.com/revue/news/232471.shtml Secuobs.com : 2010-06-17 06:37:46 - Recent changes en - Created page with 'List of videos created' New page List of videos created http://www.secuobs.com/revue/news/232342.shtmlhttp://www.secuobs.com/revue/news/232342.shtml Secuobs.com : 2010-06-17 06:37:46 - Recent changes en - deleted Books Book Test content was ' REDIRECT Books Book Test 2' and the only contributor was 'Admin' New page http://www.secuobs.com/revue/news/232341.shtmlhttp://www.secuobs.com/revue/news/232341.shtml Secuobs.com : 2010-06-17 05:12:06 - Recent changes en - uploaded File 6 17 2010 2 22 42 AM tmpF34Bjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/232317.shtmlhttp://www.secuobs.com/revue/news/232317.shtml Secuobs.com : 2010-06-17 05:12:06 - Recent changes en - Created page with 'This is the account usualy used when creating editing pages via O2's MediaWiki tool' New page This is the account usualy used when creating editing pages via O2's MediaWiki tool http://www.secuobs.com/revue/news/232316.shtmlhttp://www.secuobs.com/revue/news/232316.shtml Secuobs.com : 2010-06-17 05:12:06 - Recent changes en - moved Live test 2 to Live test 3 New page http://www.secuobs.com/revue/news/232315.shtmlhttp://www.secuobs.com/revue/news/232315.shtml Secuobs.com : 2010-06-15 02:33:18 - Recent changes en - Created page with ' http wwwethicalhackcouk 2010 06 owasp-o2-platform-automatinghtml' New page http wwwethicalhackcouk 2010 06 owasp-o2-platform-automatinghtml http://www.secuobs.com/revue/news/231494.shtmlhttp://www.secuobs.com/revue/news/231494.shtml Secuobs.com : 2010-06-06 23:34:57 - Recent changes en - Older revision Revision as of 20 49, 6 June 2010 Line 6 Line 6 I like how the home page has quite a number of links for people to follow what is going on http wwwwelcometoalexcom page indexcfm I like how the home page has quite a number of links for people to follow what is going on http wwwwelcometoalexcom page indexcfm very nice clear home page for project http quicksharpsourceforgenet I could use this for the different O2 modules very nice clear home page for project http quicksharpsourceforgenet I could use this for the different O2 modules online graphic design resources http wwwgliffycom - Powerful 'visio like' online tool 5 USD per month http aviarycom - this one looks like the most powerful of them all including both image editing vector based graphs http sketchodopodcom - online sketch tool http wwwallmymagiccom wizcard create gobot - Simple design tool http wwwqueekycom app - Simple design tool http wwwflashpaintcom - Flash based simple design tool http drawanywherecom - create diagrams needs registation http wwwimaginationcubedcom - Flash based real time design tool with replay and sharing capabilities http wwwkerpoofcom very powerful engine to create stories and movies unfortunately it looks focused on kids and doesn't allow for custom images http cooltextcom - create logos and buttons online http://www.secuobs.com/revue/news/229011.shtmlhttp://www.secuobs.com/revue/news/229011.shtml Secuobs.com : 2010-06-05 03:50:39 - Recent changes en - uploaded File 6 5 2010 12 32 24 AM tmp25E9jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/228824.shtmlhttp://www.secuobs.com/revue/news/228824.shtml Secuobs.com : 2010-06-05 03:50:39 - Recent changes en - Older revision Revision as of 23 42, 4 June 2010 Line 3 Line 3 The first attempt at creating this environment is now at http try-o2com and more details about how the multiple O2 websites should work together can be read on this blog post http try-o2com node 5 try-o2com, o2-platformcom and OWASPorg The first attempt at creating this environment is now at http try-o2com and more details about how the multiple O2 websites should work together can be read on this blog post http try-o2com node 5 try-o2com, o2-platformcom and OWASPorg - Image 6_5_2010_12_32_24_AM_tmp25E9jpg Image 6_5_2010_12_32_24_AM_tmp25E9jpg link http try-o2com http://www.secuobs.com/revue/news/228823.shtmlhttp://www.secuobs.com/revue/news/228823.shtml Secuobs.com : 2010-06-04 21:58:35 - Recent changes en - http://www.secuobs.com/revue/news/228766.shtmlhttp://www.secuobs.com/revue/news/228766.shtml Secuobs.com : 2010-06-04 21:58:35 - Recent changes en - Older revision Revision as of 18 02, 4 June 2010 One intermediate revision not shown http://www.secuobs.com/revue/news/228765.shtmlhttp://www.secuobs.com/revue/news/228765.shtml Secuobs.com : 2010-06-03 19:26:34 - Recent changes en - Online Training, Remote Support, Custom development New page Training courses in London, UK '''Thu 10th Jun, London''' Training Course Introduction to the OWASP O2 Platform Introduction to the OWASP O2 Platform '''Fri 11th Jun, London''' Training Course Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform '''Thu 17th Jun, London''' Training Course Introduction to the OWASP O2 Platform Introduction to the OWASP O2 Platform '''Fri 18th Jun, London''' Training Course Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform Book Course To register for the '''Introduction to the OWASP O2 Platform''' course use this http wwweventbritecom event 715819034 ONLINE FORM To register for the '''Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform''' course use this http wwweventbritecom event 715870187 ONLINE FORM Online Training, Remote Support, Custom development For companies that need training, remote support or custom development for the OWASP O2 Platform, the main O2 developer Dinis Cruz currently provides the following services at a hourly or daily basis '''Online training ''' Variation based on customer requirements of the existing O2 Platform courses Training_Course Introduction_to_the_OWASP_O2_Platform Introduction to the OWASP O2 Platform and Training_Course Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform '''Remote support ''' designed for security consultants currently engaged in reviews using the O2 Platform who need specific help with existing O2 modules, APIs or workflows '''Custom development ''' designed for security consultants or application owners who have specific technological needs that are currently not meet by O2 in most cases the deliverable will be a new Module or API To trigger to this service, purchase the required number of hours or days using the respective tickets and contact Dinis Cruz with the desired schedule for Custom Development it is better to contact Dinis before the purchase and agree on the project's scope Budget This is a remote based service, and the user interaction and demos will be performed using DimDim's Web Conferencing solution Purchase Services To purchase these services use this http o2serviceseventbritecom ONLINE FORM http://www.secuobs.com/revue/news/228320.shtmlhttp://www.secuobs.com/revue/news/228320.shtml Secuobs.com : 2010-06-03 04:09:59 - Recent changes en - Created page with 'Inspired and with a couple code snippets from on Pluralsight Fritz Onion ViewState Decoder 22 see http mercurypluralsightcom toolsaspx here is a ViewState for ASPNE ' New page Inspired and with a couple code snippets from on Pluralsight Fritz Onion ViewState Decoder 22 see http mercurypluralsightcom toolsaspx here is a ViewState for ASPNET 20 built as an O2 Script screenshots paste the code below in O2's Simple Script Editor sourcecode var panel O2Guiopen DotNet 20 ViewState Viewer , 800,500 var controls paneladd_1x1 WebBrowser , ViewState and ControlState Details var iePanel controls 0 add_Panel var ie iePaneladd_IE iesilent true var comboBox iePanelinsert_Above 25 add_Label Page to open top 3 append_Control onEnter text O2ThreadmtaThread ieopen text comboBoxalign_Right controls 0 width comboBoxwidth -4 var viewStatePanel controls 1 add_Panel var viewMode viewStatePanelinsert_Above 20 set_Text Show detailed view viewStatePanelinsert_Below 100 add_LogViewer ieonNavigate browser,url comboBoxadd_Item object url comboBoxset_Text url Trying to show the ViewState for 0 info url viewStatePanelshowViewState ie,viewModevalue comboBoxsendKeys http wwwmicrosoftcom technet security currentaspx line using O2Script O2File C O2 XRules_Local API_HacmeBankcs O2File C O2 XRules_Local ExtraExMethodscs O2File C O2 XRules_Local DotNet_ViewStatecs O2File C O2 XRules_Local Extra_WatiN_ASPNET_Methodscs O2Ref InteropSHDocVwdll O2Ref WatiNCore1xdll http://www.secuobs.com/revue/news/228109.shtmlhttp://www.secuobs.com/revue/news/228109.shtml Secuobs.com : 2010-06-03 04:09:59 - Recent changes en - uploaded File 6 3 2010 2 13 27 AM tmp22B1jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/228108.shtmlhttp://www.secuobs.com/revue/news/228108.shtml Secuobs.com : 2010-06-03 04:09:59 - Recent changes en - Older revision Revision as of 01 23, 3 June 2010 2 intermediate revisions not shown Line 1 Line 1 - Inspired and with a couple code snippets from Pluralsight Fritz Onion ViewState Decoder 22 see http mercurypluralsightcom toolsaspx here is a ViewState decoder for ASPNET 20 built as an O2 Script Inspired on and with a couple code snippets from Pluralsight's Fritz Onion ViewState Decoder 22 tool see http mercurypluralsightcom toolsaspx here is a ViewState decoder for ASPNET 20 built as an O2 Script screenshots screenshots - paste the O2's Simple Script Editor paste the sourcecode included at the end of this page on a new instance of O2's Simple Script Editor Image 6_3_2010_2_06_14_AM_tmp22ABjpg Image 6_3_2010_2_06_14_AM_tmp22ABjpg - click on Execute and the following Gui will appear using a page from Microsoft's website as an example click on Execute, and the following Gui will appear using a page from Microsoft's website as an example Image 6_3_2010_2_07_36_AM_tmp22ACjpg Image 6_3_2010_2_07_36_AM_tmp22ACjpg - here is the ViewState Viewer on HacmeBank login page here is the ViewState Viewer on HacmeBank's login page Image 6_3_2010_2_09_06_AM_tmp22ADjpg Image 6_3_2010_2_09_06_AM_tmp22ADjpg - here HacmeBank's Admin login note that the ViewState values on the the response to the Admin Login Challenge here is the viewstate of HacmeBank's Admin Section login note that one of the ViewState values on the right is the response to the Admin Login Challenge this is a known vulnerability in HacmeBank Image 6_3_2010_2_10_10_AM_tmp22AEjpg Image 6_3_2010_2_10_10_AM_tmp22AEjpg - submiting value we got from the ViewState in this case 522378882 submiting the value we got from the ViewState in this case 522378882 Image 6_3_2010_2_10_42_AM_tmp22AFjpg Image 6_3_2010_2_10_42_AM_tmp22AFjpg - will login the user into HacmeBank's admin section will successfully login the user into HacmeBank's admin section Image 6_3_2010_2_11_49_AM_tmp22B0jpg Image 6_3_2010_2_11_49_AM_tmp22B0jpg Line 66 Line 66 using O2Script using O2Script - O2File API_HacmeBankcs O2File API_HacmeBankcs - O2File O2File DotNet_ViewStatecs - DotNet_ViewStatecs O2File WatiN_IEcs - O2File cs O2Ref InteropSHDocVwdll O2Ref InteropSHDocVwdll O2Ref WatiNCore1xdll O2Ref WatiNCore1xdll - http://www.secuobs.com/revue/news/228107.shtmlhttp://www.secuobs.com/revue/news/228107.shtml Secuobs.com : 2010-06-01 21:36:53 - Recent changes en - New page __TOC__ '' note this is commercial ie paid for training event, and is NOT delivered or connected with the OWASP Foundation '' Course Details This course is designed for security consultants or developers who wish to understand how the OWASP O2 Platform works, and specifically how to quickly write C scripts using O2's powerful development environment O2 also supports scripting in Java or Python The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews, and one of O2's key concept is that it is designed to 'Automate Security Consultants Knowledge and Workflows' and Allow non-security experts to access and consume Security Knowledge' The course contains a number of hands-on labs that use O2 Scripts to explain how O2 works ie using O2 on O2 This not only shows the powerful scripting and automation capabilities of O2, but also creates an easy to study environment, so that the student can 'at his hers own pace' replicate the presented case-studies Course Curriculum O2 Guided tour Using O2 for BlackBox Penetration Testing Using O2 for WhiteBox Source Code Reviews Connecting the source-code traces with the web exploits to create a unified view of the vulnerabilties O2 support for ASPNET Applications including O2's AST NET Scanner and frameworks Sharepoint, ASPNET MVC O2 support for J2EE Applicatons and Frameworks Struts, Spring Framework Using O2 to consume and instrument Open Source and 3rd Party security tools Understanding O2 File Formats Standards the tools that exist to manipulate them Understanding the currently support edWeb APIs and learn how to extend them MediaWiki, Twitter, Blogger, WordPress, GMail, EventBrite, etc Guided tour of the multiple O2 Scripting environments, with multilple examples of how to use these development environments to write new APIs or extend existing ones Automate O2 scripts by creating custom GUIs or invoking O2 from the Command line Create 'Vulnerability-driven Unit Tests' to be delivered to Developers, QA Testers and Managers Trainner The course is delivered by Dinis Cruz who the lead developer of the OWASP O2 Platform and has created and delivered a number of NET Security training courses Dates, Location and Cost '''Date s ''' Jun 10th Thu and Jun 17th Thu '''Location ''' Central London close to Victoria Station '''Cost ''' 20000 Registration To register for the course use this http wwweventbritecom event 715819034 ref ebtn ONLINE FORM http://www.secuobs.com/revue/news/227610.shtmlhttp://www.secuobs.com/revue/news/227610.shtml Secuobs.com : 2010-06-01 21:36:53 - Recent changes en - New page __TOC__ '' note this is commercial ie paid for training event, and is NOT delivered or connected with the OWASP Foundation '' Course Details Black-Box White-Box ASPNET Security Reviews using the OWASP O2 Platform This is a hands-on Training course on how to use the OWASP O2 Platform to perform both Black-Box and White-Box security reviews on ASPNET Web Applications The course is designed for security consultants developers who are responsible for performing Penetration Tests or Security Code Reviews The course will show practical examples of how to use the OWASP O2 Platform to find, exploit and document security vulnerabities For the course's labs, a number of test and real-world applications frameworks will be used In order to give the students a benign test enviroment which is easy to replicate, the vulnerable-by-design HacmeBank ASPNET banking application will be used throughout the course Course Curriculum What is the OWASP O2 Platform and how to use it Using O2's Unit Tests for web exploration and browsing Using O2's Unit Tests for web exploitation Understanding and using O2's Web Automation Tools to find and exploit vulnerabilities in HacmeBank Black-Box Understanding and using O2's AST NET Scanner to find vulnerabilities in HacmeBank White-Box Connecting the source-code traces with the web exploits to create a unified view of the vulnerabilties Create 'Vulnerability-driven Unit Tests' to be delivered to Developers, QA Testers and Managers Customizing and writing new APIs for new or modified frameworks Using O2 to consume results from open source tools and 3rd party commercial vendors Case Study Microsoft ASPNET MVC Case Study Microsoft Sharpoint Trainner The course is delivered by Dinis Cruz who the lead developer of the OWASP O2 Platform and has created and delivered a number of NET Security training courses Dates, Location and Cost '''Date s ''' Jun 11th Fri and Jun 18th Fri '''Location ''' Central London close to Victoria Station '''Cost ''' 20000 Registration To register for the course use this http wwweventbritecom event 715870187 ONLINE FORM http://www.secuobs.com/revue/news/227609.shtmlhttp://www.secuobs.com/revue/news/227609.shtml Secuobs.com : 2010-06-01 17:36:40 - Recent changes en - Created page with 'Here is an example of how to use O2's reflection APIs to start a NET process inside the current O2's AppDomain this is how to start the process directly ' New page Here is an example of how to use O2's reflection APIs to start a NET process inside the current O2's AppDomain this is how to start the process directly ProcessesstartProcess Test Recorder return this is how to start the process using reflection O2ThreadstaThread Test Recorder assembly type Program invokeStatic Main , new string http://www.secuobs.com/revue/news/227534.shtmlhttp://www.secuobs.com/revue/news/227534.shtml Secuobs.com : 2010-06-01 16:19:58 - Recent changes en - Older revision Revision as of 12 38, 1 June 2010 Line 15 Line 15 var file htmlCodesaveWithExtension html var file htmlCodesaveWithExtension html fileinfo fileinfo - - var ie about blank ie var ie about blank ie ieopen file ieopen file http://www.secuobs.com/revue/news/227494.shtmlhttp://www.secuobs.com/revue/news/227494.shtml Secuobs.com : 2010-06-01 04:27:40 - Recent changes en - New page In addition to the straitforward O2File xxx and O2Ref xxx extra code mappings that are regularlly used by O2 Scripts, for the cases where there is a need to cache the compilation of a script compilation, the special tag O2File Ref xxxx can be used This is needed in the cases where one wants to 'pass around' objects that were created from classes originally created from local C files For example the following script when executed in the 'Quick Development GUI' module will not work if instead of O2File Ref WatiN_IE_ExtensionMethodscs we use O2File WatiN_IE_ExtensionMethodscs note the lack of 'Ref ' in the 2nd case if paneltag isNull panelclear paneltag paneladd_IE var ie paneltag ieopen http wwwgooglecom return ielinks O2File Ref WatiN_IE_ExtensionMethodscs O2Ref WatiNCore1xdll http://www.secuobs.com/revue/news/227350.shtmlhttp://www.secuobs.com/revue/news/227350.shtml Secuobs.com : 2010-06-01 01:51:45 - Recent changes en - uploaded File 5 31 2010 11 28 38 PM tmp1119jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/227331.shtmlhttp://www.secuobs.com/revue/news/227331.shtml Secuobs.com : 2010-06-01 01:51:45 - Recent changes en - New page Due to the constant API refactoring and the move to have more and more O2 functionality being exposed via the dynamically compiled retrieved via SVN scripts, there is a need to ensure that most scripts compiled ok before the main O2 XRules Database module is pushed to the ClickOnce deployment site To do that the following script is now used to make sure that all relevant O2 Scripts modules compile OK var panel O2Guiopen Compiling all local O2 Scripts ,500,500 panelclear panelinsert_Below var dataGridView paneladd_DataGridView dataGridViewadd_Column File dataGridViewadd_Column Compiler Mode 1 ,100 dataGridViewadd_Column Compiler Mode 2 ,100 dataGridViewnoSelection foreach var file in C O2 O2Scripts_Database Scripts files cs ,true var compiler1Result filecompile null var compiler2Result new O2DotNetWrappersDotNetCompileEngine compileSourceFile file null var rowId dataGridViewadd_Row file,compiler1Result, compiler2Result dataGridViewget_Row rowId Cells 0 StyleForeColor compiler1Result compiler2Result ColorGreen ColorRed dataGridViewget_Row rowId Cells 1 StyleForeColor compiler1Result ColorGreen ColorRed dataGridViewget_Row rowId Cells 2 StyleForeColor compiler2Result ColorGreen ColorRed O2Ref SystemDatadll using O2ViewsASCXAscxMainGUI here is a result of its execution as per 31-May-2010 Image 5_31_2010_11_28_38_PM_tmp1119jpg Note the errors that happen in 'Compilation Mode 1' are caused by circular references in the O2File includes http://www.secuobs.com/revue/news/227330.shtmlhttp://www.secuobs.com/revue/news/227330.shtml Secuobs.com : 2010-05-31 14:56:02 - Recent changes en - Older revision Revision as of 11 32, 31 May 2010 3 intermediate revisions not shown Line 1 Line 1 __TOC__ __TOC__ - NET's vulnerable application HacmeBank originally developed by http wwwfoundstonecom Foundstone HacmeBank is NET's vulnerable application HacmeBank originally developed by http wwwfoundstonecom Foundstone - It is a great case study for NET vulnerabilities and it is used extensively by O2 and 3rd party scanners to test and showcase its engine - download Install and download - HacmeBank HacmeBank Instalation_and_setup - O2 Hacmebank - NET HacmeBank Unit Tests for Vulnerabilities O2 NET AST Scanner - HacmeBank Example O2 NET AST Scanner - HacmeBank - SQL Injection PoC http wwwyoutubecom watch v j0d3F3wqfRU Using the O2 NET Ast Engine youtube video - 3rd Party Tool NetSparker - Netsparker from http wwwmavitunasecuritycom Mavituna Security is a BlackBox scanner designed to test Web Applications - 's Ferruh Mavituna one of the main Netsparker's developers who will soon post here details on how to scan HameBank using Netsparker - - http://www.secuobs.com/revue/news/227211.shtmlhttp://www.secuobs.com/revue/news/227211.shtml Secuobs.com : 2010-05-30 13:22:34 - Recent changes en - Created page with ' 30-May-2010, by Dinis Cruz file Extra_ExtensionMethodscs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Pla ' New page 30-May-2010, by Dinis Cruz file Extra_ExtensionMethodscs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemIO using SystemDrawing using SystemThreading using SystemDrawingImaging using SystemWindowsForms using SystemCollectionsGeneric using SystemLinq using SystemXmlLinq using SystemReflection using SystemText using O2InterfacesO2Core using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2DotNetWrappersWindows using O2DotNetWrappersDotNet using O2ViewsASCX using O2ViewsASCXDataViewers using O2ViewsASCXExtensionMethods using O2ExternalSharpDevelopAST using O2ExternalSharpDevelopExtensionMethods using O2ExternalIEWrapper using O2ExternalIEExtensionMethods using O2XRulesDatabase_Rules_Interfaces using WatiNCore using WatiNCoreInterfaces using SHDocVw using mshtml O2Ref WatiNCore1xdll O2Ref Microsoftmshtmldll O2Ref InteropSHDocVwdll O2File C O2 O2Scripts_Database Scripts APIs WatiN WatiN_IEcs O2File C O2 O2Scripts_Database Scripts APIs WatiN WatiN_IE_ExtensionMethodscs O2Ref C O2 tempDir 5-27-2010 tmp4479tmpdll namespace O2Script public static class ExtraMethods2 Elements public static IHTMLElement htmlElement this Element element return IHTMLElement elementHTMLElement public static void remove this Element element elementouterHtml public static void remove this List elements foreach var element in elements elementouterHtml public static List outerHtml this List elements, string outerHtml where T Element foreach var element in elements elementouterHtml outerHtml return elements public static List innerHtml this List elements, string innerHtml where T Element foreach var element in elements elementinnerHtml innerHtml return elements public static T outerHtml this T element, string outerHtml where T Element if element null var htmlElement elementhtmlElement if htmlElement null htmlElementouterHTML outerHtml return element public static T innerHtml this T element, string innerHtml where T Element if element null var htmlElement elementhtmlElement if htmlElement null htmlElementinnerHTML innerHtml return element public static Element class this List elements, string className foreach var element in elements if elementClassName className return element return null public static List classes this List elements, string className return from element in elements where elementClassName className select element toList public static List classes this List elements return from element in elements where elementClassName null select elementClassName toList public static List elements this IElementsContainer elementsContainer return from element in elementsContainerElements select element toList public static List elements this WatiN_IE watinIe where T Element return from element in watinIeelements where element is T select T element toList public static List ids this List elements return from element in elements where elementId null select elementId toList public static Dictionary byId this List elements var result new Dictionary foreach var element in elements if elementId null resultadd elementId, element return result public static T element this WatiN_IE watinIe, string id where T Element return watinIeelements id id public static Element element this WatiN_IE watinIe, string id return watinIeelements id id public static Element id this List elements, string id foreach var element in elements if elementId null elementId id return element return null public static List texts this List elements, string text return elementstexts text,false public static List texts this List elements, string text, bool useRegEx if useRegEx return from element in elements where elementtext regEx text select element toList else return from element in elements where elementtext text select element toList public static Element text this List elements, string text foreach var element in elements if elementId null elementtext text return element return null public static T id this List elements, string id where T Element var element elementsid id if element is T return T element return null TextField Extension methods public static List texts this List textFields return from textField in textFields select textFieldtext toList public static List texts this List textFields, string text return from textField in textFields where textFieldtext text select textField toList public static TextField appendLine this TextField textField, string textToAppend return textFieldappendText textToAppendline public static TextField appendText this TextField textField, string textToAppend if textField null textFieldvalue textFieldvalue textToAppend return textField public static WatiN_IE set_Value this WatiN_IE watinIe, string textFieldId, string text return watinIevalue textFieldId, text public static WatiN_IE value this WatiN_IE watinIe, string textFieldId, string text var textField watinIetextField textFieldId if textField null textFieldvalue text else in WatiN_IE value, could not find textField with id 0 error text return watinIe Link public static List ids this List links return from link in links where linkId null select linkId toList public static bool hasLink this WatiN_IE watinIe, string nameOrId foreach var link in watinIelinks if linkid nameOrId linktext nameOrId return true return false return watinIelinks ids Contains id Button public static bool hasButton this WatiN_IE watinIe, string nameOrId foreach var button in watinIebuttons if buttonid nameOrId buttonvalue nameOrId return true return false return watinIebuttons ids Contains id public static WatiN_IE click this WatiN_IE watinIe, string id if watinIehasButton id var button watinIebutton id buttonclick else if watinIehasLink id var link watinIelink id linkclick else in WatiN_IE click, could not find button or link with id 0 error id return watinIe list extension methods public static bool contains this List list, string text if list null return listContains text return false Panel extension methods public static object tag this Panel panel return object panelinvokeOnThread panelTag public static T tag this Panel panel return T panelinvokeOnThread var tag panelTag if tag is T return T tag return default T public static Panel tag this Panel panel, object tag panelinvokeOnThread panelTag tag return panel misc public static bool url this WatiN_IE watinIe, string url return watinIeurl url Flashing and Hightlight public static T flash this T element where T Element return elementflash 2 public static T flash this T element, int timesToFlash where T Element elementFlash timesToFlash return element public static T select this T element where T Element return elementhighlight public static T highlight this T element where T Element elementHighlight true return element public static O2BrowserIE editMode this O2BrowserIE o2BrowserIE return O2BrowserIE o2BrowserIEinvokeOnThread o2BrowserIEHtmlEditMode true return o2BrowserIE when adding to O2 code base, make onEditedHtmlChange thread safe public static O2BrowserIE onTextChange this O2BrowserIE o2BrowserIE, Action callback return O2BrowserIE o2BrowserIEinvokeOnThread o2BrowserIEonEditedHtmlChange callback return o2BrowserIE Reflection public static void infoTypeName this object _object if objectnotNull _objecttypeName info else in infoTypeName _object was null error Logging ExtensionMethods public static void info this bool value valuestr info public static string debug this bool value return valuestr debug file Extra_AST_ExtensionMethodscs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemIO using SystemDrawing using SystemThreading using SystemDrawingImaging using SystemWindowsForms using SystemCollectionsGeneric using SystemLinq using SystemXmlLinq using SystemReflection using SystemText using O2InterfacesO2Core using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2DotNetWrappersWindows using O2DotNetWrappersDotNet using O2ViewsASCX using O2ViewsASCXDataViewers using O2ViewsASCXExtensionMethods using O2ExternalSharpDevelopAST using O2ExternalSharpDevelopExtensionMethods using O2APIASTExtensionMethods using ICSharpCodeNRefactory using Ast ICSharpCodeNRefactoryAst namespace O2Script public static class Extra_Ast_ExtensionMethods in O2_API_AST ExtensionMethodsCSharp MethodDeclaration public static AstMethodDeclaration returnType this AstMethodDeclaration methodDeclaration, string returnType methodDeclarationTypeReference new AstTypeReference returnType return methodDeclaration Attribute_ExtensionMethods public static T add_Attribute this T attributedNode, string attributeName where T AstAttributedNode var attribute new AstAttribute attributeName,null,null return attributedNodeadd_Attribute attribute public static T add_Attribute this T attributedNode, AstAttribute attribute where T AstAttributedNode var attributeSection new AstAttributeSection attributeSectionAttributesAdd attribute return attributedNodeadd_Attribute attributeSection public static T add_Attribute this T attributedNode, AstAttributeSection attributeSection where T AstAttributedNode attributedNodeAttributesAdd attributeSection return attributedNode MethodDeclaration_ExtensionMethods public static AstBlockStatement add_Body this AstMethodDeclaration methodDeclaration var blockDeclaration new AstBlockStatement methodDeclarationBody blockDeclaration return blockDeclaration public static T append this T iNode, AstINode iNodeToAppend where T AstINode if iNodehash iNodeToAppendhash iNodeChildrenAdd iNodeToAppend return iNode BlockStatement public static AstBlockStatement body this AstINode iNode if iNode is AstMethodDeclaration return iNode as AstMethodDeclaration Body var methodDeclaration iNodemethodDeclaration if methodDeclarationnotNull return methodDeclarationBody method declaration for iNode 0 was null error iNode return null public static AstBlockStatement parentBlock this AstINode iNode return iNodeparent variableDeclaration public static AstVariableDeclaration add_Variable this AstBlockStatement blockDeclaration, string name, object value var primitiveValue new AstPrimitiveExpression value,valuestr var typeReference new AstTypeReference valuetypeName return blockDeclarationadd_Variable name, primitiveValue,typeReference new TypeReference String public static AstVariableDeclaration add_Variable this AstBlockStatement blockDeclaration, string name, AstExpression expression return blockDeclarationadd_Variable name, expression, AstTypeReferenceNull public static AstVariableDeclaration add_Variable this AstBlockStatement blockDeclaration, string name, AstExpression expression, string typeReference return blockDeclarationadd_Variable name, expression, new AstTypeReference typeReference public static AstVariableDeclaration add_Variable this AstBlockStatement blockDeclaration, string name, AstExpression expression, AstTypeReference typeReference var variableDeclaration new AstVariableDeclaration name, expression variableDeclarationTypeReference typeReference var localVariableDeclaration new AstLocalVariableDeclaration variableDeclaration blockDeclarationappend localVariableDeclaration return variableDeclaration public static AstBlockStatement add_Return this AstBlockStatement blockStatement, object returnData if returnDatanotNull AstExpression returnStatement if returnData is AstExpressionStatement returnStatement returnData as AstExpressionStatement if returnData is AstExpression returnStatement returnData as AstExpression else returnStatement new AstPrimitiveExpression returnData,returnDatastr blockStatementappend new AstReturnStatement returnStatement return blockStatement Expression public static AstExpressionStatement expressionStatement this AstExpression expression return new AstExpressionStatement expression Object public static int hash this object _object if object null return _objectGetHashCode return default int public static bool isNull this object _object return _object null public static bool notNull this object _object return _object null Method Invocation public static AstMemberReferenceExpression add_MemberReference this AstBlockStatement blockStatement, string memberName , AstExpression expression var identifier new AstIdentifierExpression memberName var memberReference new AstMemberReferenceExpression identifier, data blockStatementappend memberReferenceexpressionStatement return memberReference public static AstInvocationExpression add_Invocation this AstBlockStatement blockStatement, string methodName return blockStatementadd_Invocation ,methodName public static AstInvocationExpression add_Invocation this AstBlockStatement blockStatement, string typeName, string methodName, params object parameters , AstExpression expression if methodNamevalid isFalse return null AstExpression memberExpression null if typeNamevalid memberExpression new AstMemberReferenceExpression new AstIdentifierExpression typeName ,methodName else memberExpression new AstIdentifierExpression methodName var memberReference new AstInvocationExpression memberExpression if parameters null var arguments new List foreach var parameter in parameters if parameter is AstExpression argumentsadd parameter as AstExpression else argumentsadd new AstPrimitiveExpression parameter,parameterstr memberReferenceArguments arguments blockStatementappend memberReferenceexpressionStatement return memberReference http://www.secuobs.com/revue/news/227009.shtmlhttp://www.secuobs.com/revue/news/227009.shtml Secuobs.com : 2010-05-30 05:31:44 - Recent changes en - Created page with 'This script compiles all SVN-based O2 Scripts and displays the results in a color coded DataGridView panelclear var dataGridView paneladd_DataGridV ' New page This script compiles all SVN-based O2 Scripts and displays the results in a color coded DataGridView panelclear var dataGridView paneladd_DataGridView dataGridViewadd_Column File dataGridViewadd_Column Compiler Mode 1 ,100 dataGridViewadd_Column Compiler Mode 2 ,100 dataGridViewnoSelection foreach var file in C O2 O2Scripts_Database Scripts files cs ,true var compiler1Result filecompile null var compiler2Result new O2DotNetWrappersDotNetCompileEngine compileSourceFile file null var rowId dataGridViewadd_Row file,compiler1Result, compiler2Result dataGridViewget_Row rowId Cells 0 StyleForeColor compiler1Result compiler2Result ColorGreen ColorRed dataGridViewget_Row rowId Cells 1 StyleForeColor compiler1Result ColorGreen ColorRed dataGridViewget_Row rowId Cells 2 StyleForeColor compiler2Result ColorGreen ColorRed O2Ref SystemDatadll http://www.secuobs.com/revue/news/226976.shtmlhttp://www.secuobs.com/revue/news/226976.shtml Secuobs.com : 2010-05-30 04:29:11 - Recent changes en - Created page with 'O2 has native support for Unit Tests In these examples we will show how to load execute a file containing unit tests and execute a dynamically created unit test file Creati ' New page O2 has native support for Unit Tests In these examples we will show how to load execute a file containing unit tests and execute a dynamically created unit test file Creating test environment panelTag null ascx_Simple_Script_Editor script null if panelTag is ascx_Simple_Script_Editor isFalse panelclear script paneladd_Script false panelTag script var unitTests scriptinsert_Right 300 scriptonCompilationOk var location scriptcsharpCompilerassembly Location locationinfo unitTestsloadFile location script ascx_Simple_Script_Editor panelTag using O2CoreXRulesAscx using O2XRulesDatabaseO2Utils O2Ref O2_Core_XRulesdll Example 1 loading and executing a file with unit tests create the Gui and set events panelclear script paneladd_Script false panelTag script var unitTests scriptinsert_Right 300 scriptonCompilationOk var location scriptcsharpCompilerassembly Location locationinfo unitTestsloadFile location load data var sampleUnitTestCode C O2 O2Scripts_Database Scripts UnderDev_and_PoCs Samples SampleUnitTestscs fileContents sampleUnitTestCode generateDebugSymbols lineBefore scriptset_Command sampleUnitTestCode using O2CoreXRulesAscx using O2XRulesDatabaseO2Utils O2Ref O2_Core_XRulesdll Example 2 creating dynamically a unit test file and executing it create the Gui and set events panelclear script paneladd_Script false panelTag script var unitTests scriptinsert_Right 300 scriptonCompilationOk var location scriptcsharpCompilerassembly Location locationinfo unitTestsloadFile location dynamically create source source code var compilationUnit new CompilationUnit compilationUnitadd_Using NUnitFramework var type compilationUnitadd_Type_ UnitTestClass typeadd_Attribute TestFixture var method typeadd_Method testMethodA returnType String methodadd_Attribute Test var body methodadd_Body bodyadd_Invocation Assert , That , true, value was true bodyadd_Return All OK body typeadd_Method testMethodB add_Attribute Test add_Body add_Invocation Assert , That , false, this will fail var sourceCode compilationUnitcsharpCode sourceCode O2Ref NUnitFrameworkdll lineBefore generateDebugSymbols lineBefore scriptset_Command sourceCode return null using O2CoreXRulesAscx using O2XRulesDatabaseO2Utils O2Ref O2_Core_XRulesdll http://www.secuobs.com/revue/news/226974.shtmlhttp://www.secuobs.com/revue/news/226974.shtml Secuobs.com : 2010-05-29 12:55:42 - Recent changes en - uploaded File 5 29 2010 10 13 40 AM tmpEBjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/226898.shtmlhttp://www.secuobs.com/revue/news/226898.shtml Secuobs.com : 2010-05-29 12:55:42 - Recent changes en - Created page with 'To install HacmeBank download download the an http o2platformgooglecodecom svn trunk DemosAndTests HacmeBank HacmeBank_v20pourcents20Dinispourcents20versionpourcents20-pourcents207pourcents20Decpourcents2008zip u ' New page To install HacmeBank download download the an http o2platformgooglecodecom svn trunk DemosAndTests HacmeBank HacmeBank_v20pourcents20Dinispourcents20versionpourcents20-pourcents207pourcents20Decpourcents2008zip updated version from O2's SVN or you can install the original one from http wwwfoundstonecom us resources proddesc hacmebankhtm FoundStone's website install on local server not IIS To make it easier to start and stop, instead of IIS we will be using the simple NET WebServer included with Visual Studio WebDevWebServerExe who in Visual Studio 2008 is included here Image 5_29_2010_10_13_40_AM_tmpEBjpg additional documentation http wwwfoundstonecom us resources whitepapers hacmebank_userguide2pdf Foundstone's HacmeBank user guide Category HacmeBank http://www.secuobs.com/revue/news/226897.shtmlhttp://www.secuobs.com/revue/news/226897.shtml Secuobs.com : 2010-05-29 12:55:42 - Recent changes en - Older revision Revision as of 09 21, 29 May 2010 One intermediate revision not shown Line 3 Line 3 This code uses O2's WatiN integration to create an easy 'IE automation' scripting environement This code uses O2's WatiN integration to create an easy 'IE automation' scripting environement - Install and confirm we can login - After HacmeBank Instalation and setupInstalling HacmeBank and run the following script that will confirm if we are logged in var ie about black ie 0,500,750,500 ieopen http localhost 58348 HacmeBank_v2_Website iefield txtUserName value jm iefield txtPassword value jm789 iebutton Submit click Vulnerability User A is able to see User's B account details var ie about black ie 0,500,750,500 ieopen http localhost 58348 HacmeBank_v2_Website iefield txtUserName value jm iefield txtPassword value jm789 iebutton Submit click ielink My Accounts click ielink View Transactions click var url ieurl var payload urlreplace 5204320422040003 , 5204320422040001 ieopen payload iecloseInNSeconds 20 return null http://www.secuobs.com/revue/news/226896.shtmlhttp://www.secuobs.com/revue/news/226896.shtml Secuobs.com : 2010-05-28 21:12:22 - Recent changes en - uploaded File 28 05 2010 17 33 58 tmpB3A0jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/226749.shtmlhttp://www.secuobs.com/revue/news/226749.shtml Secuobs.com : 2010-05-28 21:12:22 - Recent changes en - Older revision Revision as of 16 36, 28 May 2010 Line 4 Line 4 gsdf gsdf g g Image 28_05_2010_17_33_34_tmp58F2jpg Image 28_05_2010_17_33_58_tmpB3A0jpg http://www.secuobs.com/revue/news/226748.shtmlhttp://www.secuobs.com/revue/news/226748.shtml Secuobs.com : 2010-05-28 19:03:03 - Recent changes en - uploaded File 28 05 2010 16 13 09 tmpB5B8jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/226715.shtmlhttp://www.secuobs.com/revue/news/226715.shtml Secuobs.com : 2010-05-28 03:11:51 - Recent changes en - uploaded File 5 28 2010 12 39 11 AM tmp3201jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/226486.shtmlhttp://www.secuobs.com/revue/news/226486.shtml Secuobs.com : 2010-05-27 23:58:44 - Recent changes en - uploaded File 5 27 2010 8 21 02 PM tmp5EA2jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/226446.shtmlhttp://www.secuobs.com/revue/news/226446.shtml Secuobs.com : 2010-05-27 22:00:20 - Recent changes en - Created page with 'This API shows an example using WatiN automation for to implent the workflow required to publish a blog post on blogger Curernt features capabilities of O2's Blogger API Logi ' New page This API shows an example using WatiN automation for to implent the workflow required to publish a blog post on blogger Curernt features capabilities of O2's Blogger API Login using user provided credentials Login using locally stored credential files View Blogger dashboard Open Blooger 'New Post' page Sync local html editor on the left with Blogger's Title and Body Html fields Triiger 'New Post' preview Submit 'New Post' screenshot and video open O2's Simple Script Editor and enter the following code API_BloggerlaunchGui include API_Bloggercs click execute and a simple GUI will pop-up here is a video of the entire workflow from login till blog post youtube L6ejF0Djnxw sourcecode http://www.secuobs.com/revue/news/226385.shtmlhttp://www.secuobs.com/revue/news/226385.shtml Secuobs.com : 2010-05-27 03:41:00 - Recent changes en - New page 27 May 2010, by Dinis Cruz file API_BTOpenZonecs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemThreading using SystemCollectionsGeneric using SystemLinq using SystemReflection using SystemWindowsForms using SystemText using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2ViewsASCXExtensionMethods using O2ViewsASCXclassesMainGUI using O2ExternalIEExtensionMethods using SHDocVw using WatiNCore using O2XRulesDatabase_Rules_Interfaces O2File C O2 XRules_Local Extra_methodscs O2File C O2 XRules_Local WatiN_IE_ExtensionMethodscs O2File C O2 XRules_Local WatiN_IEcs O2Ref InteropSHDocVwdll O2Ref WatiNCore1xdll namespace O2Script public class API_BTOpenZone public WatiN_IE ie public string defaultWebPage public API_BTOpenZone ie ie 0,450,800,700 defaultWebPage http wwwgooglecouk public API_BTOpenZone login return login public API_BTOpenZone login string fileWithLoginDetails ieopen defaultWebPage if ietitle Google we are already conneted to the internet info else if ietitle BT Openzone detected BT Openzone page info get the login details ICredential credential fileWithLoginDetailscredential BtOpenZone if credential null no file with credentials provided, or no credential of type BtOpenZone found debug credential ieaskUserForUsernameAndPassword var BTOpenZone_UserName credentialusername var BTOpenZone_Password credentialpassword populate fields and submit form if iehasField username iehasField password detected BT Openzone login Form info submitting login details debug iefield username value BTOpenZone_UserName iefield password value BTOpenZone_Password iebuttons 0 click if iehasField username Login failed, Aborting worklow error return this ieopen defaultWebPage if ietitle Google isFalse Expected Google page did not load error return this public API_BTOpenZone logout logout sequence logging out debug var logoutPage https wwwbtopenzonecom 8443 accountLogoff home var logoutConfirmedPage https wwwbtopenzonecom 8443 accountLogoff home confirmed true ieopen logoutPage ieopen logoutConfirmedPage ietitle info if iehasField username logout ok info else logout failed info return this public API_BTOpenZone closeInNSeconds int seconds iecloseInNSeconds seconds return this public API_BTOpenZone waitNSeconds int seconds iewaitNSeconds seconds return this file ascx_AskUserForLoginDetailscs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemThreading using SystemCollectionsGeneric using SystemLinq using SystemReflection using SystemWindowsForms using SystemText using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2ViewsASCXExtensionMethods using O2ViewsASCXclassesMainGUI using O2ExternalIEExtensionMethods using O2XRulesDatabase_Rules_Interfaces O2File C O2 XRules_Local Extra_methodscs namespace O2Script public class ascx_AskUserForLoginDetails ContainerControl public string UserName get set public string Password get set public AutoResetEvent HaveAnswer get set public TextBox UserNameTextBox get set public TextBox PasswordTextBox get set public Button OKButton get set public static ICredential ask var loginDetailsGui O2Guiopen Enter Login Details , 250,115 loginDetailsGuibuildGui var credential loginDetailsGuigetAnswer loginDetailsGuiclose return credential public ascx_AskUserForLoginDetails HaveAnswer new AutoResetEvent false UserName Password public void buildGui UserNameTextBox thisadd_Label Username ,10,0 append_TextBox UserNameTextBoxonTextChange text UserName text align_Right this PasswordTextBox thisadd_Label Password ,35,0 append_TextBox isPasswordField PasswordTextBoxonTextChange text Password text align_Right this var OKButton thisadd_Button OK , 60,0 OKButtononClick answerAvailable left thiswidth - OKButtonwidth - 1 anchor_BottomRight thisparentForm Closed sender,e answerAvailable public ICredential getAnswer HaveAnswerWaitOne var credential new Credential credentialUserName UserName credentialPassword Password u 0 debug credentialUserName p 0 debug credentialPassword return credential public void answerAvailable HaveAnswerSet public void close if thisparentForm null thisparentForm Close file ascx_CaptchaQuestioncs This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemThreading using SystemCollectionsGeneric using SystemLinq using SystemReflection using SystemWindowsForms using SystemText using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2ViewsASCXExtensionMethods using O2ViewsASCXclassesMainGUI using O2ExternalIEExtensionMethods namespace O2Script public class ascx_CaptchaQuestion ContainerControl public string CaptchaQuestionUrl get set public string CaptchaAnswer get set public AutoResetEvent HaveAnswer get set public TextBox AnswerTextBox get set public ascx_CaptchaQuestion HaveAnswer new AutoResetEvent false CaptchaAnswer public void buildGui string captchaQuestionUrl CaptchaQuestionUrl captchaQuestionUrl var browser thisadd_Browser var panelAbove browserinsert_Above 25 var label panelAboveadd_Label What does the CAPTCHA say top 6 var button panelAboveadd_Button Submit buttonleft panelAbovewidth -buttonwidth anchor_TopRight AnswerTextBox labelappend_TextBox AnswerTextBoxonTextChange text CaptchaAnswer text onEnter text answerAvailable width panelAbovewidth -buttonwidth - labelwidth - 10 anchor_TopLeftRight top 2 buttononClick answerAvailable browseropen CaptchaQuestionUrl thisparentForm Closed sender,e answerAvailable public string getAnswer HaveAnswerWaitOne return AnswerTextBoxget_Text public void answerAvailable answerAvailable debug HaveAnswerSet public void close if thisparentForm null thisparentForm Close public static string askQuestion string captchaQuestionUrl var captchaQuestion O2Guiopen Answer CAPTCHA Question , 400,200 captchaQuestionbuildGui captchaQuestionUrl var captchaAnswer captchaQuestiongetAnswer captchaQuestionclose return captchaAnswer file Extra Extension methods public static class ExtraMethods2 Controls Extension methods public static T controls this Control control where T Control foreach var childControl in controlcontrols if childControl is T return T childControl return null TreeView public static TextBox isPasswordField this TextBox textBox textBoxinvokeOnThread textBoxPasswordChar ' ' return textBox ascx_TableList Extension Methods public static ascx_TableList clearTable this ascx_TableList tableList var listViewControl tableListgetListViewControl listViewControlinvokeOnThread listViewControlClear return tableList public static ascx_TableList add_Column this ascx_TableList tableList, string columnName var listViewControl tableListgetListViewControl listViewControlinvokeOnThread listViewControlColumnsAdd columnName return tableList public static ascx_TableList add_Columns this ascx_TableList tableList, params string columnsName tableListadd_Columns columnsNametoList return tableList public static ascx_TableList add_Row this ascx_TableList tableList, params string cellValues tableListadd_Row cellValuestoList return tableList SecretData extensionMethods O2XRulesDatabase_Rules_Interfaces public static ICredential credential this string fileWithSecretData, string credentialType if fileWithSecretDatafileExists var secretData fileWithSecretDatadeserialize return secretDatacredential credentialType return null public static ICredential credential this SecretData secretData, string credentialType if secretData null var credentials secretDatacredentialTypes credentialType if credentials null credentialssize 0 return credentials 0 return null public static string username this ICredential credential return credentialUserName public static string password this ICredential credential return credentialPassword file WatiN_IE This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemIO using SystemDrawing using SystemThreading using SystemDrawingImaging using SystemWindowsForms using SystemCollectionsGeneric using SystemLinq using SystemXmlLinq using SystemReflection using SystemText using O2InterfacesO2Core using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2DotNetWrappersWindows using O2DotNetWrappersDotNet using O2ViewsASCX using O2ExternalSharpDevelopAST using O2ExternalSharpDevelopExtensionMethods using WatiNCore using SHDocVw O2Ref WatiNCore1xdll O2Ref InteropSHDocVwdll O2File C O2 XRules_Local Extra_methodscs namespace O2Script public class WatiN_IE public Thread IEThread get set public IE IE get set public SHDocVwInternetExplorerClass InternetExplorer get set public AutoResetEvent WaitForIELaunch get set public AutoResetEvent WaitForIEClose get set public int maxExecutionWaitTime 5000 public WatiN_IE WaitForIEClose new AutoResetEvent false WaitForIELaunch new AutoResetEvent false public WatiN_IE InternetExplorer ieInstanceToAttach this attachTo ieInstanceToAttach public WatiN_IE SystemWindowsFormsWebBrowser webBrowser this attachTo webBrowser public WatiN_IE createIEObject return createIEObject about blank public WatiN_IE createIEObject string url return createIEObject url, 0,0,500,500 public WatiN_IE attachTo SystemWindowsFormsWebBrowser webBrowser need to do this or the attach is not going to work WatiNCoreSettingsAutoStartDialogWatcher false attachTo webBrowserActiveXInstance as InternetExplorer return this public WatiN_IE attachTo InternetExplorer ieInstanceToAttach IEThread O2ThreadstaThread try WatiNCoreSettingsAutoStartDialogWatcher false WaitForIECloseReset attaching to IE with LocationName ' 0 ' info ieInstanceToAttachLocationName IE new IE ieInstanceToAttach this doesn't work on external processes attach InternetExplorer SHDocVwInternetExplorerClass IEInternetExplorer ieInstanceToAttach as DWebBrowserEvents2_Event OnQuit ON WatiN_IE attachTo Quit EVENT debug close WaitForIELaunchSet WaitForIECloseWaitOne AFTER WaitForIEClose error catch Exception ex exlog in attachTo InternetExplorer ,true WaitForIELaunchSet WaitForIECloseSet before WaitForIELaunch error WaitForIELaunchWaitOne after WaitForIELaunch error return this public WatiN_IE createIEObject string url, int top, int left, int width, int height IEThread O2ThreadstaThread launching a new WatIN InternetExplorer Process info try if urlvalid isFalse url about blank SettingsMakeNewIeInstanceVisible false IE new IE url InternetExplorer SHDocVwInternetExplorerClass IEInternetExplorer InternetExplorerTop top InternetExplorerLeft left InternetExplorerWidth width InternetExplorerHeight height InternetExplorerVisible true InternetExplorerOnQuit close WaitForIELaunchSet WaitForIECloseWaitOne catch Exception ex exlog in WatiN_IE createIEObject WaitForIELaunchSet WaitForIECloseSet WaitForIELaunchWaitOne return this public void close closing WatiN_IE info try IEClose catch Exception ex exlog in WatiN_IEclose detach public void detach WaitForIECloseSet public WatiN_IE execute MethodInvoker callback var executionComplete new AutoResetEvent false IEThreadinvoke try callback catch Exception ex exlog in WatiN_IE execute executionCompleteSet if executionCompleteWaitOne maxExecutionWaitTime isFalse in WatiN_IE executeOnThread, maxExecutionWaitTime 0 ms was reached for action error maxExecutionWaitTime return this public T execute Func callback object returnData null var executionComplete new AutoResetEvent false IEThreadinvoke try returnData callback catch Exception ex exlog in WatiN_IE execute executionCompleteSet if executionCompleteWaitOne maxExecutionWaitTime isFalse in WatiN_IE executeOnThread, maxExecutionWaitTime 0 ms was reached for action error maxExecutionWaitTime if returnData is T return T returnData return default T public static List ieInstances var ieInstances new List ShellWindows shellWindows new ShellWindowsClass for int i 0 i ieInstances, string locationToMatch if ieInstancessize 0 foreach var instance in ieInstances if instanceLocationName locationToMatch return instance in I InternetExplorer locationName it was not possible to find an IE instance with LocationName ' 0 ' debug locationToMatch return null public static List locationNames this List ieInstances return from instance in ieInstances select instanceLocationName toList public static List locationUrls this List ieInstances return from instance in ieInstances select instanceLocationURL toList file WatiN_IE_ExtensionMethods This file is part of the OWASP O2 Platform http wwwowasporg indexphp OWASP_O2_Platform and is released under the Apache 20 License http wwwapacheorg licenses LICENSE-20 using System using SystemIO using SystemDrawing using SystemThreading using SystemDrawingImaging using SystemWindowsForms using SystemCollectionsGeneric using SystemLinq using SystemXmlLinq using SystemReflection using SystemText using O2InterfacesO2Core using O2Kernel using O2KernelExtensionMethods using O2DotNetWrappersExtensionMethods using O2DotNetWrappersWindows using O2DotNetWrappersDotNet using O2ViewsASCX using O2ViewsASCXclassesMainGUI using O2ExternalSharpDevelopAST using O2ExternalSharpDevelopExtensionMethods using O2XRulesDatabase_Rules_Interfaces using WatiNCore using SHDocVw O2Ref WatiNCore1xdll O2Ref InteropSHDocVwdll O2File C O2 XRules_Local WatiN_IEcs O2File C O2 XRules_Local ascx_CaptchaQuestioncs O2File C O2 XRules_Local ascx_AskUserForLoginDetailscs namespace O2Script public static class WatiN_IE_ExtensionMethods WatIN ExtensionMethods public static WatiN_IE ie this string url int top 0 int left 900 return urlie top, left public static WatiN_IE ie this string url, int top, int left int width 385 int height 500 return urlie top, left, width, height public static WatiN_IE ie this string url, int top, int left, int width, int height var ie new WatiN_IE iecreateIEObject url, top, left, width, height return ie public static WatiN_IE ie this O2ExternalIEWrapperO2BrowserIE o2BrowserIE return o2BrowserIE as SystemWindowsFormsWebBrowser ie public static WatiN_IE ie this SystemWindowsFormsWebBrowser webBrowser return new WatiN_IE webBrowser uri url public static Uri uri this WatiN_IE watinIe return watinIeIEUri public static string url this WatiN_IE watinIe return watinIeuri str public static string title this WatiN_IE watinIe return watinIeIETitle public static bool title this WatiN_IE watinIe, string title return watinIeIETitle title public static string processId this WatiN_IE watinIe return watinIeIEProcessIDstr region close public static WatiN_IE close this WatiN_IE watinIe closing WatIN InternetExplorer Process info watinIeclose watinIeClose return watinIe public static WatiN_IE closeInNSeconds this WatiN_IE watinIe, int seconds if seconds 60 in WatiN_IE closeInNSeconds, provided value bigger than 60 secs, so changing the delay before close to 60 error seconds 60 IE instance will be closed in 0 seconds info seconds O2ThreadmtaThread watinIewait 5000 watinIeclose return watinIe internet explorer public static InternetExplorerClass internetExplorer this WatiN_IE watinIe return watinIeInternetExplorer public static WatiN_IE open this WatiN_IE watinIe, string url return watinIeopen url,0 public static WatiN_IE open this WatiN_IE watinIe, string url, int miliseconds WatIN open 0 info url watinIeexecute watinIeIEGoTo url watinIewait miliseconds return watinIe public static WatiN_IE wait this WatiN_IE watinIe return watinIewait 1000 public static WatiN_IE wait this WatiN_IE watinIe, int miliseconds if miliseconds 0 watinIesleep miliseconds return watinIe public static WatiN_IE waitNSeconds this WatiN_IE watinIe, int seconds if seconds 0 watinIesleep seconds 1000 return watinIe public static T wait this T element, int miliseconds where T Element if miliseconds 0 elementsleep miliseconds return element public static WatiN_IE linkClick this WatiN_IE watinIe, string findByUrl, int miliseconds watinIeexecute var link watinIelink FindByUrl findByUrl linkclick miliseconds return watinIe public static Link link this WatiN_IE watinIe, AttributeConstraint attributeConstraint return watinIelink attributeConstraint, 0 public static Link link this WatiN_IE watinIe, AttributeConstraint attributeConstraint, int miliseconds Link link null watinIeexecute link watinIeIELink attributeConstraint watinIewait miliseconds return link WatiN Image Extension Methods public static WatiNCoreImage image this WatiN_IE watinIe, string name foreach var image in watinIeimages if imageid name linktext name return image in WatiN_IE could not find Image with name 0 error name null value return null public static List images this WatiN_IE watinIe return from image in watinIeIEImages select image toList public static Uri uri this WatiNCoreImage image return image null imageUri null public static string url this WatiNCoreImage image return image null imageUristr public static string src this WatiNCoreImage image return image null imageSrc WatiN Link Extension methods public static Link link this WatiN_IE watinIe, string name foreach var link in watinIelinks if linkid name linktext name return link in WatiN_IE could not find Link with name 0 error name null value return null public static List links this WatiN_IE watinIe return from link in watinIeIELinks select link toList public static string url this Link link return link null linkUrl public static Link click this Link link return linkclick 0 public static Link click this Link link, int miliseconds if link null linkClick linkwait miliseconds return link public static List texts this List links return from link in links select linktext toList public static List urls this List links return from link in links select linkurl toList WatiN Button Extension methods public static WatiNCoreButton button this WatiN_IE watinIe, string name foreach var button in watinIebuttons if buttonid name buttonvalue name return button in WatiN_IE could not find Button with name 0 error name null value return null public static List buttons this WatiN_IE watinIe return from button in watinIeIEButtons select button toList public static List texts this List buttons return from button in buttons select buttontext toList public static List values this List buttons return from button in buttons select buttonvalue toList public static List ids this List buttons return from button in buttons select buttonid toList public static List names this List buttons return buttonsids public static string value this WatiNCoreButton button return button null buttonValue public static WatiNCoreButton click this WatiNCoreButton button if button null buttonClick return button WatiN SelectLists Extension methods public static SelectList selectList this WatiN_IE watinIe, string name watinIetextFields after some events foreach var selectList in watinIeselectLists if selectListid name checkBoxtitle name return selectList in WatiN_IE could not find SelectList with name 0 error name null value return null public static List selectLists this WatiN_IE watinIe return from selectList in watinIeIESelectLists select selectList toList public static string id this SelectList selectList return selectList null selectListId public static List ids this List selectLists return from selectList in selectLists select selectListid toList public static List options this SelectList selectList return from option in selectListOptions select option toList public static Option select this Option option try if option null optionSelect catch Exception ex exlog in Option select return option public static SelectList select this SelectList selectList, int index var options selectListoptions if index checkBoxes this WatiN_IE watinIe return from checkBox in watinIeIECheckBoxes select checkBox toList public static string id this WatiNCoreCheckBox checkBox return checkBox null checkBoxId public static List ids this List checkBoxes return from checkBox in checkBoxes select checkBoxid toList public static bool value this WatiNCoreCheckBox checkBox return checkBox null checkBoxChecked false public static List values this List checkBoxes return from checkBox in checkBoxes select checkBoxvalue toList public static WatiNCoreCheckBox value this WatiNCoreCheckBox checkBox, bool value if checkBox null try checkBoxChecked value catch Exception ex exlog in WatiNCoreCheckBox value return checkBox public static WatiNCoreCheckBox check this WatiNCoreCheckBox checkBox return checkBoxvalue true public static WatiNCoreCheckBox uncheck this WatiNCoreCheckBox checkBox return checkBoxvalue false WatiN TextField Extension methods public static TextField field this WatiN_IE watinIe, string name return watinIetextField name public static List fields this WatiN_IE watinIe return watinIetextFields public static bool hasField this WatiN_IE watinIe, string name return watinIetextFieldExists name public static TextField textField this WatiN_IE watinIe, string name watinIetextFields after some events foreach var textField in watinIetextFields if textFieldname name textFieldtitle name return textField in WatiN_IE could not find TextField with name 0 error name null value return null public static bool textFieldExists this WatiN_IE watinIe, string name foreach var textField in watinIetextFields if textFieldname name textFieldtitle name return true return false public static List textFields this WatiN_IE watinIe return from textField in watinIeIETextFields select textField toList public static string name this TextField textField return textField null textFieldName public static List names this List textFields return from textField in textFields select textFieldname toList public static string value this TextField textField return textField null textFieldValue public static List values this List textFields return from textField in textFields select textFieldvalue toList public static TextField value this TextField textField, string value if textField null textFieldValue value return textField WatiN Forms Extension methods public static List forms this WatiN_IE watinIe return from form in watinIeIEForms select form toList WatiN Elemetns Extension methods public static List elements this WatiN_IE watinIe, string tagName return from element in watinIeIEElements where elementTagName tagName select element toList public static List elements this WatiN_IE watinIe return from element in watinIeIEElements select element toList public static List tagNames this List elements return from element in elements select elementTagName Distinct toList public static Dictionary indexedByTagName this List elements var result new Dictionary foreach var element in elements resultadd elementTagName, element return result public static string tagName this Element element return elementTagName WatiN Divs Extension methods public static Div div this WatiN_IE watinIe, string id foreach var div in watinIedivs if divId null divId id return div return null public static List divs this WatiN_IE watinIe return from div in watinIeIEDivs select div toList public static List ids this List divs return from div in divs where divId null select divId toList WatiN Element Extension methods public static string id this Element element return element null elementId public static string text this Element element return element null elementText public static string title this Element element return element null elementTitle public static string innerHtml this Element element return element null elementInnerHtml public static string outerHtml this Element element return element null elementOuterHtml public static string html this Element element return elementouterHtml Captcha Extension methods public static string resolveCaptcha this WatiN_IE watinIe, string captchaImageUrl return ascx_CaptchaQuestionaskQuestion captchaImageUrl public static string resolveCaptcha this WatiN_IE watinIe, TextField textField return watinIeresolveCaptcha textFieldvalue public static WatiN_IE resolveCaptcha this WatiN_IE watinIe, string questionField, string answerField var questionUrl watinIetextField questionField value if questionUrlvalid var captchaAnswer watinIeresolveCaptcha questionUrl watinIetextField answerField value captchaAnswer return watinIe public static string askUserQuestion this WatiN_IE watinIe, string question, string title, string defaultValue var assembly MicrosoftVisualBasic assembly var intercation assemblytype Interaction var parameters new object question,title,defaultValue,-1,-1 return intercationinvokeStatic InputBox ,parameters str user interaction public static WatiN_IE askUserToContinue this WatiN_IE watinIe MessageBoxShow Click OK to Continue the WatiN IE workflow , O2 Message ,MessageBoxButtonsOK, MessageBoxIconQuestion return watinIe public static ICredential askUserForUsernameAndPassword this WatiN_IE watinIe return watinIeaskUserForUsernameAndPassword public static ICredential askUserForUsernameAndPassword this WatiN_IE watinIe, string loginType var credential ascx_AskUserForLoginDetailsask if loginTypevalid credentialCredentialType loginType return credential TreeView helper public static Panel showElementsInTreeView this WatiN_IE watinIe var hostPanel O2Guiopen WatiN element details ,400,400 var controls hostPaneladd_1x1 Html elements , Propeties var propertyGrid controls 1 add_PropertyGrid controls 0 add_TreeView add_Nodes watinIeelements indexedByTagName sort showSelection beforeExpand treeNode, elements try treeNodeadd_Nodes elements catch Exception ex exlog in beforeExpand afterSelect element propertyGridshow element afterSelect elements propertyGridshow elements 0 return hostPanel Control Extensionmethods public static WatiN_IE add_IE this Control control var browser controladd_Control return browserie -- http://www.secuobs.com/revue/news/226088.shtmlhttp://www.secuobs.com/revue/news/226088.shtml Secuobs.com : 2010-05-27 01:44:20 - Recent changes en - Older revision Revision as of 22 32, 26 May 2010 Line 1 Line 1 - evp youtube 1 evp youtube 1 http://www.secuobs.com/revue/news/226072.shtmlhttp://www.secuobs.com/revue/news/226072.shtml Secuobs.com : 2010-05-27 01:44:20 - Recent changes en - Created page with 'This page documents the extensions installed in this MediaWiki site and the main templates used embed a YouTube video use the following wiki text to embed a YouTube video ' New page This page documents the extensions installed in this MediaWiki site and the main templates used embed a YouTube video use the following wiki text to embed a YouTube video inside a Wiki page replacing 'rTD31e7HY4E' with the id of the desired video youtube rTD31e7HY4E this the template contents which solves the right align problem with the http wwwmediawikiorg wiki Extension EmbedVideoPlus EmbedVideoPlus extension by wrapping it around a table evp youtube 1 http://www.secuobs.com/revue/news/226071.shtmlhttp://www.secuobs.com/revue/news/226071.shtml Secuobs.com : 2010-05-27 01:44:20 - Recent changes en - Older revision Revision as of 22 39, 26 May 2010 2 intermediate revisions not shown Line 1 Line 1 MediaWiki this website MediaWiki extensions and templates Apache Apache - Admin Apache_Configurationscurrent Wiki Apache Configurations Admin Apache_Configurationscurrent Wiki Apache Configurations MediaWiki Skins MediaWiki Skins http://www.secuobs.com/revue/news/226070.shtmlhttp://www.secuobs.com/revue/news/226070.shtml Secuobs.com : 2010-05-27 01:44:20 - Recent changes en - Older revision Revision as of 22 42, 26 May 2010 3 intermediate revisions not shown Line 1 Line 1 This script shows how to implement a complex workflow using O2's scripting capabilities and WatiN's web automation API This script shows how to implement a complex workflow using O2's scripting capabilities and WatiN's web automation API - In this case we will semi-automatically create an new GMail email address the process cannot be automated due to the CAPTCHA and mobile phone verificaiton In this case we will semi-automatically create an new GMail email address the process cannot be fully automated due to the CAPTCHA and mobile phone verificaiton requirements - The script workflow is The script workflow is - open a new instance of IE open a new instance of IE - navigate to https wwwgooglecom accounts NewAccount service mail navigate to https wwwgooglecom accounts NewAccount service mail - ask user to provide the desired new account name email and password ask user to provide the desired new account name email and password - auto populate the following fields, checkboxes and listbox auto populate the following fields, checkboxes and listbox FirstName, LastName, Email, Passwd, PasswdAgain, homepageSet, PersistentCookie, smhck, questions, IdentityAnswer - FirstName, LastName, Email, Passwd, PasswdAgain, homepageSet, PersistentCookie, smhck, questions, IdentityAnswer click on the 'check availability ' button - click on the 'check availability ' button if required ask the user for the CAPTCHA protecting multiple 'check availability ' requests - if required ask the user for the CAPTCHA protecting multiple 'check availability ' requests ask the user to resolve the main 'new account creation' CAPTCHA - ask the user to resolve the main 'new account creation' CAPTCHA click on the Submit button - click on the Submit button when the next page loads, ask the used for his mobile phone number, populate the 'MobileNumber' field with the provided value and submit the form - when the next page loads, ask the used for his mobile phone number, populate the 'MobileNumber' field with the provided value and submit the form in the next page, ask the user to enter the mobile phone verification number, populate the 'idvGivenAnswer' field and submit the form - in the next page, ask the user to enter the mobile phone verification number, populate the 'idvGivenAnswer' field and submit the form to complete the process open the http mailgooglecom mail page - to complete the process open the http mailgooglecom mail page video video http://www.secuobs.com/revue/news/226069.shtmlhttp://www.secuobs.com/revue/news/226069.shtml Secuobs.com : 2010-05-26 19:04:06 - Recent changes en - uploaded File 5 26 2010 4 10 46 PM tmp3ACBjpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/225909.shtmlhttp://www.secuobs.com/revue/news/225909.shtml Secuobs.com : 2010-05-26 19:04:06 - Recent changes en - Older revision Revision as of 15 12, 26 May 2010 One intermediate revision not shown Line 4 Line 4 screenshots screenshots in O2's Simple Script Editor enter the following code return ascx_AskUserForLoginDetailsask O2File C O2 XRules_Local ascx_AskUserForLoginDetailscs Image 5_26_2010_4_08_15_PM_tmp3AC8jpg and click execute Image 5_26_2010_4_08_53_PM_tmp3AC9jpg enter some values on the username and password field Image 5_26_2010_4_09_36_PM_tmp3ACAjpg which you can see are now loaded into a ICredential object show in the 'Ouput' window of O2's Simple Script Editor Image 5_26_2010_4_10_46_PM_tmp3ACBjpg source code source code public class ascx_AskUserForLoginDetails ContainerControl public string UserName get set public string Password get set public AutoResetEvent HaveAnswer get set public TextBox UserNameTextBox get set public TextBox PasswordTextBox get set public Button OKButton get set public static ICredential ask var loginDetailsGui O2Guiopen Enter Login Details , 250,115 loginDetailsGuibuildGui var credential loginDetailsGuigetAnswer loginDetailsGuiclose return credential public ascx_AskUserForLoginDetails HaveAnswer new AutoResetEvent false UserName Password public void buildGui UserNameTextBox thisadd_Label Username ,10,0 append_TextBox UserNameTextBoxonTextChange text UserName text align_Right this PasswordTextBox thisadd_Label Password ,35,0 append_TextBox PasswordTextBoxonTextChange text Password text align_Right this var OKButton thisadd_Button OK , 60,0 OKButtononClick answerAvailable left thiswidth - OKButtonwidth - 1 anchor_BottomRight thisparentForm Closed sender,e answerAvailable public ICredential getAnswer HaveAnswerWaitOne var credential new Credential credentialUserName UserName credentialPassword Password u 0 debug credentialUserName p 0 debug credentialPassword return credential public void answerAvailable HaveAnswerSet public void close if thisparentForm null thisparentForm Close http://www.secuobs.com/revue/news/225908.shtmlhttp://www.secuobs.com/revue/news/225908.shtml Secuobs.com : 2010-05-26 19:04:06 - Recent changes en - uploaded File 5 26 2010 4 55 55 PM tmp3D05jpg File uploaded using an O2 Platform script New page http://www.secuobs.com/revue/news/225907.shtmlhttp://www.secuobs.com/revue/news/225907.shtml Secuobs.com : 2010-05-26 19:04:06 - Recent changes en - Older revision Revision as of 16 16, 26 May 2010 4 intermediate revisions not shown Line 1 Line 1 this API shows an example using WatiN automation for to login into a particular wireless provider in this case UK's BTOpenZone this API shows an example using WatiN automation for to login into a particular wireless provider in this case UK's BTOpenZone - screenshot and video - open O2's Simple Script Edito and enter the following code - var fileWithLoginDetails C O2 USERDATA BtOpenZonexml var fileWithLoginDetails C O2 USERDATA BtOpenZonexml Line 13 Line 12 closeInNSeconds 20 closeInNSeconds 20 - O2File API_BTOpenZonecs O2File API_BTOpenZonecs Image 5_26_2010_4_55_55_PM_tmp3D05jpg click execute and the login process will start here is a video of the login sequence when using an local secrets file evp youtubeBRbVOjjPhBE code code public class API_BTOpenZone public WatiN_IE ie public string defaultWebPage public API_BTOpenZone ie ie 0,450,800,700 defaultWebPage http wwwgooglecouk public API_BTOpenZone login return login public API_BTOpenZone login string fileWithLoginDetails ieopen defaultWebPage if ietitle Google we are already conneted to the internet info else if ietitle BT Openzone detected BT Openzone page info get the login details ICredential credential fileWithLoginDetailscredential BtOpenZone if credential null no file with credentials provided, or no credential of type BtOpenZone found debug credential ieaskUserForUsernameAndPassword var BTOpenZone_UserName credentialusername var BTOpenZone_Password credentialpassword populate fields and submit form if iehasField username iehasField password detected BT Openzone login Form info submitting login details debug iefield username value BTOpenZone_UserName iefield password value BTOpenZone_Password iebuttons 0 click if iehasField username Login failed, Aborting worklow error return this ieopen defaultWebPage if ietitle Google isFalse Expected Google page did not load error return this public API_BTOpenZone logout logout sequence logging out debug var logoutPage https wwwbtopenzonecom 8443 accountLogoff home var logoutConfirmedPage https wwwbtopenzonecom 8443 accountLogoff home confirmed true ieopen logoutPage ieopen logoutConfirmedPage ietitle info if iehasField username logout ok info else logout failed info return this public API_BTOpenZone closeInNSeconds int seconds iecloseInNSeconds seconds return this public API_BTOpenZone waitNSeconds int seconds iewaitNSeconds seconds return this http://www.secuobs.com/revue/news/225906.shtmlhttp://www.secuobs.com/revue/news/225906.shtml